MAL-2025-138800 Malicious code in influential-gold-owl (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5ad2b907e7638c4cc960232fe1ba9d5b4991ef9f2e74f63b98debd0b8ef7f6b8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in thin-teal-lion (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 56a34044521b8d493446ab2db5511bad2eadf7225dbc6736f3eb20f283246bdb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-138656 Malicious code in different-lime-muskox (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5e7cf9ad724984eddbd64d87261920b7961cf78946c0bfd844b748147829f831 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-138641 Malicious code in cuddly-salmon-jellyfish (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c3d7cf04aad6f2a06133f45d1220eae087ff54ae6af7741630bbfd49b116e9bb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in citra-semur7-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0fd5330eef4e7c8ead7c2d660242d3ea4387f79de983cd368897db2f8db8de82 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in vina-kue68-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2167b366b7ac38653dfa8e357c4c8407e854f1d8a8218ec561049a27a2bcae99 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in yuni-bakwan54-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 99c48138d070476bb46116844d241df9f7d3590032963d28a044e2d60cd915ae This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cici-teh55-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e72a4e52ae922e255cc20499901f6be8bfd882c8e95e9a06ed2dd967076a5e9f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dear_gecko_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 30bf45750b06351f1fc2885a8613c134766564f194cc52e85c668a6719a0de71 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in agus-pisang22-sumpek (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a359eb9434f6595b8e011d52e3d01aac83f1714cca3ff8cbb2015c1d76977eeb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in andi-kue52-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aa0a7ee583cc5da84d83c51ebfd1f9b9c30ac69141e656d0cd5a93e0c50770f4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lina-tiwul91-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b6d483164f82067fa9e2a083a69e0c3a069af11ebd4e370512ea346205630055 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in developing_perch_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e423efcd751ac8011626e58f69fafe0f4bc78534d561e0477050a89026801b69 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in vera-ketan60-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9d35977770cfc6eea1ebcc2ca2bc28f787c2dabefab358e3d87169b7eccac8fe This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in gita-pecel11-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6be5f223ab7c2a1ba06a80be1f2c741906e9b4eb28f9764ca2959e4053fb65b6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in vida-tahu13-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector edb6885dfe3b30b4c178d8123c1b8ae5e809961e3fed0d1c50fa9ace46367dcc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nadia-tek1-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5a7583e0669935ec5582e1030317b3f9121798f268fead2d0c3ac1378775101d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fadhil-sate47-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d4639163daba1a14e46fc15b758bbd961eee01604c99fcbe2a4775ef97754a8a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in zain-nasicampur17-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2dc44e0a627f3ef81aeb0ff5749489ea0c0ade0d189594c617bb41d715ec3660 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in andi-kemplang63-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4bcb0d3be0a933fff2cc6b80e5bed00703d39ca83c45e724ee508fe3893cc63e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...