MAL-2025-66613 Malicious code in accessible-apricot-mollusk (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0e981ab581b7132e2f6d3f06ed5538db2a5441f15339cd2da29adf40f67a3aab This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in unable-rose-whale (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7298374d8544f5faf21010e36db809189e2306a9b9330b323ee85be402c78776 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in yanti-miebogor53-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0cee059f5b0da50fd588f1aea9dbad09ab3eecf71fc27a7ad5f1ff3daf3c08de This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kurnia-kue31-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2f08db6db163cbbe973fec02c83b9e04e40c649da717d7df8416eeb686a23b7f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ogi-brengkes65-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 413ac93b87004787c9802e1b1ebe2af5804d52b1f4c11d069905b515d88add7a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in utomo-tumis39-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0ae736332ba48fd3bdb1164e34dca131891d41127407286c1f10b19b80f59fbd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in vulnerable_ocelot_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 886d40ed548d41b1ac47ba7c4cff8b73c7ac90fa09c77e8fb2cf1a7e5e108e91 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rudi-keraktelor77-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 82b14b695a821777a820ec90f8fd71b9f6c4a0cc7447ca85bcb43d1908030627 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in wawan-bika78-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fa7624a71d155aba3e528ed06b4317db346dfcb49b745635cf86e6e724073e02 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nadia-bubursumsum33-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d4b96910d95cb9eb6dde31123e914398919e4ddd54a6a96dd24803d16af5f50b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in budi-tempe16-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 22f564dc1e8444fa8cdb3a8186af57c3147ad773546089adb5ecf04e4e0c3bc6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in oktafian-sate21-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8352b66827afc14902e2ac13eb1cfdcdf10fa30544993b18b957526ea72096c2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in yuni-ketoprak93-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 77fa23fa0634496ec916e1667763ff27676dea4cd44fc8b32858f7bac61e7760 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in vida-jengkol38-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d4618e2b508cc26d5c5bbf56d93e656b6e367533e10bfdd797fb39904717fda0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in andi-asinan13-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2affdd1a35fdb8fc7eb28abbc02f81ed7f5a7a7c06914d202c1961ccd2033e6b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rifqi-ketan33-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9f50dd7fc296005088117427478468820f2146b21efbcc5edb003f5dc6274baa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in strange_wildfowl_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector acfa9598d5f80dd215c9c3692d3f06cfbfb994ec32a20f56323f6c4c473c85ce This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in heavy_gibbon_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 388e2eeb188a7682e181cf7caae40436107673e56f0ba0863cf528daecef4611 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hadianto-oblok51-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5d9582d96a6a306ea31f850c7ccb9cd1ec3dd8cb34eed37ed200a1b951e1b5cf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in vera-tongseng40-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1f08f197cabf8854d9f9a1da71cb68275a07ca4e9b9e2c88731ff8e27b78772b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...