MAL-2025-139768 Malicious code in avior-equinox-xanadu-gacrux (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 76eea4af93d35fb757d64bc6a0908d1992ec9f0e3137d15eb9846f8f33a18dca This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in putri-bakwan98-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 00e4ebcca60e90c927ad6e493c1f10d6827d552bda7074f325de7a4d5f73921f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in galih-gulai15-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d9cd911bd863f15680984cdac246d0dbf4a53620540584ae8d03bec6533f6f29 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in putri-kepok76-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 41217a060afcb29e62748e6b54c7c8e0742bd954f15eed489658bd5cdd98b793 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lisa-serabi63-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 40af467331e1c83662167be59f967295c8d873a50bef16bfc00682c6aa3f67d7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dewanto-gorengan17-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b01e4143b2af9eb020a808955711dfc24e2614247881117a49cfbf6ecc28a66b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mulyono-mieaceh38-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6f68f5c69a737836bee6d4dcf4dd9c627d83dda878d72a8f9fdad2827616207d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dewanto-mangut80-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8e8a34e4cc7705bc09469a75032113374a04294263769ec9c7ba02ef9ed6b578 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in putri-tahutek19-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6b52a3447049c13eb9f45255448e4ada331c43cf4540566717e64c816c0d5ed7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kurnia-lepet59-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d3b50a402fe205297e489e6056c4c082a350454b093ef8002c56231185f60714 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in xaver-keripik53-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d16b577f091d17ff8ed14ea288d50d03253a3c74eb8c5d088bf4f7afe769de16 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in indah-dodol8-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 699a9d4765a0ce2cdc796148393970c278687568d78cf7cff24f740479f356d8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fauzi-mangut55-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ba0bc033e402fae85bbe5ed6a3c43b327e0397f216c73544e8f79e1750093eb4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in extraordinary_crane_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7f8e9f84540c73524ee5c48797d91c90fec53cf6e7e308888315117c13037a7c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-133417 Malicious code in fajar-tongseng45-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c2662f7c4b665fe2aaf9fa593e4d04f44f0c3e03a5eeb16f9b1af6d7dfee1191 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-135311 Malicious code in lutfi-nasi41-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 307b71dcd14152fdca348dad786f8ec89638263fa4b0613b6856b4ee417af2bd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-133182 Malicious code in erwin-bakwan38-sumpek (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0cc484223d7e602aa1a588d16ea4fb738d9a0befae0abe64b679e428fe9350a3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-137544 Malicious code in umi-lapis23-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 89a64b8ba0d33607ed545e879bd44d3dff2d3f789f9e762f08aba5d1cff1130c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-134273 Malicious code in increased_mandrill_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 01ae336b0459f676bee0b05b6ee0d1443ab4f5486fa26af7845a9ec27f91a155 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-136816 Malicious code in salty_hookworm_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 45905bf0c2192d27d0dfeb93b26f692a996b9f6d2ede4a5094e881facf07fda9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...