MAL-2025-148040 Malicious code in soap-winston-antares-nodejs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector de4d78de5a7e83ac0f3732587e429926c070200f55ddc3718d36e34b490d7f49 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in yelling-peach-wildcat (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 829994b9f23f5e676f51c94748f0165c1855210eb72af32f09e3fb6cde81b34d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-138664 Malicious code in dominant-plum-bedbug (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6bae52cfb25a9af9c388c4e718280853f0a3261a39fb8fcac1de8ae77f8340cb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-138648 Malicious code in defeated-lavender-rat (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 85de9281ba5d27e75ea0a077a2a1957518f8fd3cdcee4945eab4b5ccbb558a17 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in galih-miemee63-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 43b9fe3143e7283638248bf1212eb9868a99e17f1a0870b9f5c49c0ce85e1b82 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in imperial_whippet_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e2ed558fb6767d86600489e53fbb7c1da8e4492fd320e164e099f5f219ec9e37 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in jaja-tiwul5-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fe032c20f8075093403928c2f707dbf46866c3d08a26603bf0d0c523a19e77fc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kurnia-sambel62-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e080b2dc028e0b6fbcb51845cc1ac31253ebcf09be27a60fd7ce8380c5f187aa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in laila-kue53-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6c01b27654acc5829307d995ddbcaf727b46807e0670564c4dad3d5b5c3cbdef This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in maya-martabak24-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1c96120b8dfe3c687d59cca44bf33bdc955b6880c289c76785d540181d561644 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nina-moci87-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c079502e5f005e02d65848073250d0857048d2038d65b455ac70a8e9ca108ce3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ogi-mendoan79-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1655ee4201035a2b7dc22227df8e7fe118ee256162f206b42df937d5e585633d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in riana-dradag68-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4eb7912cd2bf937f9a3bd831a3407d127743a11a328b3eabb0ddf92d7a53d24c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rudi-gado-gado99-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector acf777b232a939a35018f0b0687f03ccbb1434fc682b6325986ccc45b9ca59d6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in zaki-tapai38-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1e2b7548d8ce7a47a226ebbc301b637fadacceab389bf4d04c479adfd8ce65fa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cici-empal37-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7bd85670c8aa09abfccdf3b9a70a08965f051eec9e23c8428deda2c7c75b463f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in candra-saguer25-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 628773827b66e14ae8b061a2e8b2150f6580cd302733b3b0daa7efb04d0c170d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-136300 Malicious code in purring_marmot_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e518f998ce1d11acb733ff81cfbda4b324b8d333570055d68b8bfc35cddfb6ef This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-136038 Malicious code in okta-empal88-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c55e7ef9ce69e3d3d7912a81cac769ed5d4d6e0a642d9f4dc3d5734b137a5f4a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-133456 Malicious code in fauzi-lumpur44-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 45f353d352babde31db7acd80370e367625a21f8ffb967b7da0d781b5e9fb2ca This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...