MAL-2025-139092 Malicious code in valid-crimson-hippopotamus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 43bab958e94e0c20206a07309497c85049427f209cd0030f77275c219a9a6bc0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in yielding-white-vicuna (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f5f94ef43724f032a5e746999d58d119436b7dc9ca5af91c84dfceda94ff0717 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in attractive_vicuna_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 478874c1b546eb9c4154f8aba994b4737ad4d74469b985e38bdeb4f59362f4f6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in erwin-keripik88-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f34d708a6404f9b6f67f218b9a661f96cbece8a0ad53610e0fafb3444724532a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in galih-rojak95-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2c3638c8846d100cacf3a258bc152902111c28398a8e7714b1a2e1bcb9b777d9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in qori-mendut17-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 869f593743f41912ae48f9a7485ebb3240cef2bb5b105201554231177c912c8a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rising_spoonbill_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1a89e16f5f07c003fbe8c804b534aba53792682935d3addc6aa40236826286ae This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tomi-kemplang45-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3dc3467beb59d17682d1cec4c0712096e9bdc04201ec147079948c81727df117 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in used_angelfish_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 61cdc838b62c9639ca51e763de2db36cca60e5db3c32623683ae270a6ad8c5ea This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in well_planarian_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ef02c4c3eee50582ad360446fab6d338b61c342d4376066fdae40143f8badf70 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in wibowo-jamblang14-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d3f190c3d1fafe66f4c4f2b9a9cd007e8f555c6d73b458d553dce5ddea7c37ba This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in bella-jus22-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fd2e0e68ad2f116706c677a209e918e30b2638bb4f13949239847f14cfcf33f7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-132605 Malicious code in condemned_primate_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a51def8416c675ec5f5372b67b9b8ca178e9f08dc3ce65c27ab8b1ca5b86da96 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in yuni-bakwan10-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d5122051d36fcb22006b41c1aeb89e43847e7ff748b3a7a7db0d8c54c2cb950a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ida-klanting50-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 15c7561335b7d4fc65ee67e6e4a801d06bede23d41586a47cad0e16cb3454d4c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-137676 Malicious code in utomo-tapai53-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5ca04e08499fa3f90772eb33d19002ff4a67c3d01bfc79b31ccd72f7d171c519 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-136290 Malicious code in protective_fish_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 193b85b84a27d56749a203a840e9e4f106e6fab2a9944fa016140841db48beae This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-133754 Malicious code in gita-bakwan6-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 46a1da9ce8f88524a89ba8ec77dff14fe9ec4bfc82d271a8b6dd8ddf57e72f1d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-138502 Malicious code in zaki-tapai38-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1e2b7548d8ce7a47a226ebbc301b637fadacceab389bf4d04c479adfd8ce65fa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-135352 Malicious code in mahesa-botok70-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 37a235676e0cf68476d13e5dbe55afa64948f505a8e721cad50c632f42795ef6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...