MAL-2025-67296 Malicious code in colossal-purple-nightingale (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c9029ddf5bd11b3e958843fdbf29989b75761e138bae50e83b5788ae80fcce37 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70660 Malicious code in slight-bronze-elephant (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ea71d9d4835088800f116ab520a9931b775d9a6802ed21681479dbaaa5bab11e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68760 Malicious code in icy-sapphire-bat (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 04e6cb9fe14643d77e337ab99099fc51fbfa24e704234e3672325c14a0972e96 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in obnoxious_walrus_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 66ca3309ac87ff31485c4489cb1381b4e44eaa7fcc910257b4af080d454a18fe This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nadia-kemplang59-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 888d5f8c9af05ec82c513bc4ceefdd342616b8574f758ef10d41551304e08550 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in blushing_otter_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bd09a76476c359b88abebb70c21ffce67e8f9e0638684aa1046cff9937e0d225 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nadia-keripik30-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2ed33e7b8e443df4ff54707f812d41d1b868005ed0bb2833475520914eecc5ec This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ocha-nasi36-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e2b0132c34d589577d065c7056cd8feafbbc2aa1c810eae1b2d4df4ed6df98b7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rina-gandul93-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 19f700d4724aea4279eef2a426bdaa174f42ee2debcf5a479eb2aa4547995197 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kurniawan-mie15-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 67b28c446918f761b29973f00444219693e2f006c4506d9ec056fd55083c2970 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kurnia-mendut5-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dfd916533008818b38520b4804cf9c72d2d5b3e0fdd50a117adb60366ed341ff This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dian-lodeh35-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 478e9c5e89eeb84be78816f995d057a25c84aa497e93c5c8dc5f00df740dd315 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in vina-gorengan99-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 33662f87535eec9ce33bca1621b32ff7b9501341e72efdb41a28efdfa0b91a12 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in indah-dodol99-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d1c9619868896d6112928ba476bb1a2b1dba2f5f1c07790cb5895f64d12285f6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in udin-ongol-ongol40-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6868c87bec76a161169aae5a84d374367d9d58b8a0077d9b527a509b7720db82 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in budi-mangut93-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d9483f041e2c5ec8632141c10330ec2b48f1b1c8ca2f203db14feaffc8e9bf68 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cindy-dradag11-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 32601c41ece9d0ece016996348e44b38043d7eee4501ab908408cfe654bdd549 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in maya-moci20-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d11763feafa0a46db30a00289f41ead4670df496ac4f947c7e5703a5c38f95a0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sinta-lupis8-sumpek (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ef8477d3f63779abf5db5ada3510f52c777db294dd21c273194eea7000cdedc0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rina-sate20-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1a741bb58a1d22dcaf82170072a7e92a3d815edcf72e153e68a1ef251ef52a83 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...