MAL-2025-69252 Malicious code in magic-sapphire-spoonbill (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d6818543d663edafa30979a7a6c25bb834a995313e115ecd2f74004daff96757 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68953 Malicious code in interesting-magenta-wolf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 35852c710354f1f9d000a925da8839bee1235db7a21e68203dd579392cea17f2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67111 Malicious code in capitalist-scarlet-ant (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7e6d0d57300ef72003c318f75d9e83d3482318e2be9c902f77424f24b90f0263 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in obnoxious_walrus_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 66ca3309ac87ff31485c4489cb1381b4e44eaa7fcc910257b4af080d454a18fe This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rina-gandul93-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 19f700d4724aea4279eef2a426bdaa174f42ee2debcf5a479eb2aa4547995197 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in maya-moci20-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d11763feafa0a46db30a00289f41ead4670df496ac4f947c7e5703a5c38f95a0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in indah-dodol99-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d1c9619868896d6112928ba476bb1a2b1dba2f5f1c07790cb5895f64d12285f6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nadia-keripik30-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2ed33e7b8e443df4ff54707f812d41d1b868005ed0bb2833475520914eecc5ec This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in udin-ongol-ongol40-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6868c87bec76a161169aae5a84d374367d9d58b8a0077d9b527a509b7720db82 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in vina-gorengan99-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 33662f87535eec9ce33bca1621b32ff7b9501341e72efdb41a28efdfa0b91a12 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in budi-mangut93-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d9483f041e2c5ec8632141c10330ec2b48f1b1c8ca2f203db14feaffc8e9bf68 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kurnia-mendut5-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dfd916533008818b38520b4804cf9c72d2d5b3e0fdd50a117adb60366ed341ff This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in blushing_otter_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bd09a76476c359b88abebb70c21ffce67e8f9e0638684aa1046cff9937e0d225 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cindy-dradag11-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 32601c41ece9d0ece016996348e44b38043d7eee4501ab908408cfe654bdd549 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dian-lodeh35-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 478e9c5e89eeb84be78816f995d057a25c84aa497e93c5c8dc5f00df740dd315 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rina-sate20-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1a741bb58a1d22dcaf82170072a7e92a3d815edcf72e153e68a1ef251ef52a83 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sinta-lupis8-sumpek (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ef8477d3f63779abf5db5ada3510f52c777db294dd21c273194eea7000cdedc0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ocha-nasi36-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e2b0132c34d589577d065c7056cd8feafbbc2aa1c810eae1b2d4df4ed6df98b7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in budi-botok15-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2c8a72564b6efad4afbcc94bcc3332a26525aa227bdbdd134072addc71a009fb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-64125 Malicious code in lutfi-kemplang63-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ebfdce0ac50ef1340c71bdd92f438917d1e4db5845cd8a6c097a558092ee193e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...