MAL-2025-135257 Malicious code in lisa-serabi63-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 40af467331e1c83662167be59f967295c8d873a50bef16bfc00682c6aa3f67d7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dear_elephant-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f0dd296cb8cb41d0994f4b1672649e774f450dd1b5f20f7d09468dd647ea8339 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-109179 Malicious code in strategic_hawk_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 078b07de5fc49d78bdc297a901ccee030534944f6ff17738b088e68ffa6754ca This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in incredible_marsupial_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a9af04f90956769b7d651fee80eed087015ca87e6f26f08117f85b2a132df716 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-110848 Malicious code in wibowo-empal94-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector eee54c9d83719840c5656a3fff1e13edeaf67561f1ca9bacdc5a0a37ec66ed92 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-89519 Malicious code in prior_leopard_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 79d1b712ec9ef1aa78d84e625696da794847e8bfef762731b027d2a437ac903a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-87033 Malicious code in joko-bakwan24-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bb5157629c0f58d9382bc9515ef6983755dc05646d1fd84b641823f2a337ba7c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-73120 Malicious code in gita-botok30-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e9513b2f169a398510e84a9e60881ab902a33934d60e2f5dde2ddb414e22b695 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71861 Malicious code in ade-tahu94-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a40e151f77cfc18e70cf9abe2ba767acde014cc54e3af73ee977c68e4a807afc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70615 Malicious code in significant-tomato-swan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 397dfef6807f0949c57e8e8d4495fbdc768bdee20950baa7f1b58225c7b64363 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-65635 Malicious code in tomi-lutis19-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0d73e52cd9a8f07d37e450b1fcfa637fb0e80c6fcd83dae47a0a0e0db8b2cd8a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in vera-tahu77-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4872c7a3ad39dbe5972a54a4f34b18494f5f7220b844fd9dca75021e4798a0a2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...