MAL-2025-65505 Malicious code in symbolic_otter_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 263c7a3867da045df9093a38e479bf5ed13f501ada21651d3423afc2ba513abd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in helpless_stingray_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fb17ef9176860e75fd00eceb836ccee5a7afe80cddfa0f0447ad9b0e3db7876b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in varying_beaver_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e7c71d85fa1739c27c96ce73e6f9e4f7951a74b6b7ffadd32e7240043e11600d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in maya-miebogor10-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d8e7bf638942b515bdfa02bd9afbbf1dccd75cd28b35155a286a1fefccda3eca This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sari-tahu90-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 104ebd96c4f89af21e0ac9b227e2f0e241e146eab0c97319e35515d606f34eba This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hot_wasp_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6f4a98633366bc21f412404b6f1c1e6ceb5fdc3076f79e036415c874b8c982d4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in disappointed_gecko_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ee487937039c05216ad9602bcdb2b7179f5d8f5610e5b5db88387190f965a3b3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in candra-lepet46-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 789c92837df4e49ca29ac78cc86bafbdc4383afb2f91db934d7b6790a813f56e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in indah-brongkos12-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3b8a76939555467adea67679f19e67db85e2c367d9c3c214a3976da1a3655b76 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mulyono-jus21-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 860167cf6ce094323f76e9aff17a999e854ce93e0310db5a9f8fb3ad2801a6f2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nervous_prawn_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6a2f6e99aba6fa67ecf7ed0b0d881d252813ee6229d6fda49cfbce9856d3e309 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lina-keripik6-sumpek (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a47f375d18c5f8b5e28aa5a8a333f1d1fb57a7d230a6778b6f1e3875bc49b096 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in allied_roundworm_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7202f921798d60804b4f37f1bc3d2ab8ba5c0f57026fed748fd32ed014d742a1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in patria-serimuka24-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b97d83e14cc2be839e5be9e84e9f5d3fd50e100e0c2d2c4303d0dee2d0f74a01 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lutfi-miemee76-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1757c093c51919a68907b34b8b9d98fa1a2baebe037ada9d59bf9856cac2fbef This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kurnia-moci90-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 215035ea246fa5f88a3b450a6fa018da48a4dd70eb72eaf83b2d333dc2db88e3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lina-mendoan64-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2466f8c023e461a4f9e920c15e68e32c1fc6a5edfbf0788fd018bb8d4a1327c1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cici-keripik48-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 05ebdf57f64fed557b1ef4a83e65dce4f8d3f5bfc9fb0e1244a632a009e087ad This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in yanti-nasiuduk60-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 542dbd48ce8c0a1de9981336857f35e7629ee62e82fc7beae3adb3244c4201c8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in bambang-lodeh22-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0598551a3b66ca38e028145dced93725ea7aa5ee0f33dfd2a5f732cbe8d2917f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...