MAL-2025-138650 Malicious code in delicious-lavender-snail (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0131293d35046821d32bd9db2f803ed8970d7205b188041479d1b9b995e7e6d9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-138657 Malicious code in difficult-ivory-dingo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7665fd0ac01dbc5b0e30438213d33571666429d81072b9a2afeda4379d5a48b8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139101 Malicious code in vishalgo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b054b1f9806698cae3c70421a3f51632847d10f2bd35cdecf13096eef910d19b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in parliamentary-coral-caribou (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1c08012984ec3c311cb9324d108ac55bb472151dce64bbcee684c95fd2696032 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in agus-rujak69-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4bd2d280a746950c44223c1db1876dff52d2a496ed0de036022d037e6d0d0942 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in andi-dodol58-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ce9559e407323c0483256f213969e9576867968309b0c0cb5db6ce589ce8c6b2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in chubby_bat_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a3c7b1964787b4ccde214a668fda33735756b106058be8b3d330168bbe4a59a9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dewi-bakso18-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 97531772dcb2315242cb1985a6b38eccbf3ac9141611629aef147597e9aec959 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dewi-bubur61-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ae05f91cdb5d89de1a72f458846976f714b671c63f1ef3e2b3cc652169d8ef2c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dono-pecel6-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 49584ca797c28cb4fd96d03878b2b9dc4c82d838bf81a1f68d21f3cc6cf76765 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dono-telur87-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a4a971c80a797c030fb1e047c55a1fe3830588acff941b3c8d6c376a6b96878f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in erick-lontong55-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 498adef95fe3d152fbb716f99fbd13d164bfabc662384259be524cb59facfb7a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fajar-lepet22-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 35297d9b60405be861d4aa75179d93257f020e00874b6c1c30b640a2c61fb2c3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fajar-pecel4-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3038d7ea9e17a65d5cdf6d4353aed66137d1e6e94bdf922d79ec048c2cb910f4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fitri-ronde1-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 99d236fff5b060d9bee796a7425ae0e5ecae9cc95cab7a199b0589a9fa9fecf4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fun_cheetah_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a0644c1a171dd719d9c80bdc9e3493ba8cf7248cded9016abed8d8e087348fea This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in galih-brengkes52-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3a84426f38b4261789a22d198bc29abd41f1b965debc168577bd1979ce2fd563 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in gita-mendoan82-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ab1008cadf4a59a5dbc1461e99a03cba7515222b59c53c714777dd8723ff31c9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in gita-mie54-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bf81230167e2911df62d8d4dc161bb64baa078fb5799b5f7390aaeb3ab93e6e0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hadianto-bakso8-sumpek (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 20cb944f543e034c98b71e3461235413d7cd95b7c67e647c6ffb352a040a2c6e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...