MAL-2025-139101 Malicious code in vishalgo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b054b1f9806698cae3c70421a3f51632847d10f2bd35cdecf13096eef910d19b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in parliamentary-coral-caribou (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1c08012984ec3c311cb9324d108ac55bb472151dce64bbcee684c95fd2696032 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-138657 Malicious code in difficult-ivory-dingo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7665fd0ac01dbc5b0e30438213d33571666429d81072b9a2afeda4379d5a48b8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-138650 Malicious code in delicious-lavender-snail (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0131293d35046821d32bd9db2f803ed8970d7205b188041479d1b9b995e7e6d9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in erick-lontong55-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 498adef95fe3d152fbb716f99fbd13d164bfabc662384259be524cb59facfb7a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in shaky_finch_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 97ae660075b4e968acab1518f6287836f94fdf3b317566e85324749f67b0e468 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fajar-lepet22-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 35297d9b60405be861d4aa75179d93257f020e00874b6c1c30b640a2c61fb2c3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in putri-tongseng57-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f0479c22ab711a4e5eea0df31306ea44dccbb4cce06fc8c6af25b4529a1187f8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in joko-saguer69-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ff4dc55d1002773edcf9e20e80f134566d6d7dbb3ce6ed5bbec95b0c65cb5745 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in chubby_bat_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a3c7b1964787b4ccde214a668fda33735756b106058be8b3d330168bbe4a59a9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-138104 Malicious code in xaver-botok54-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 809d0d8d0bccb91045d0d843ac10eee9a3fa41238880ec989bddfb494a415643 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mulyono-lutis76-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f029da9ba8b9539ecfdfbe35533b3abe01f6ac85d4b8d3fd25b1040fee168c09 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in interesting_alligator_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6514307f2288a554123e21742d01c7166b0f1fcabaf7b01e393c168a3012cd40 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kurniawan-botok7-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b8cbdf45b3b8bf23caa09866656ac3fe2d33aef2f478f206818a49613568de78 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in regulatory_booby_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 80f2dc97877e3c8febf8755e1fcee4e315dac962d0fa0767bc25d0c99082310f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in gita-mendoan82-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ab1008cadf4a59a5dbc1461e99a03cba7515222b59c53c714777dd8723ff31c9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tania-nasi3-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dc26c781b00a6f14813066e8847887791e3ab9c6b1048aa8da9b919431be49e4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-137671 Malicious code in utomo-sego50-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7da248897641ae38ed22d3ba6da034518e6aa6bf07436dd5fedf787e61843493 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in galih-brengkes52-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3a84426f38b4261789a22d198bc29abd41f1b965debc168577bd1979ce2fd563 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in andi-dodol58-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ce9559e407323c0483256f213969e9576867968309b0c0cb5db6ce589ce8c6b2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...