MAL-2025-139092 Malicious code in valid-crimson-hippopotamus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 43bab958e94e0c20206a07309497c85049427f209cd0030f77275c219a9a6bc0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

IBM Infrastructure: Continuous Risk & Compliance

Learn all about AI-powered visibility, telemetry, and proactive security across mainframe, cloud, containers, and enterprise workloads...

Malicious code in attractive_vicuna_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 478874c1b546eb9c4154f8aba994b4737ad4d74469b985e38bdeb4f59362f4f6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in erwin-sasag20-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 65762127d939222ed10a5764c6536a339e9eef712f48b8558c83db60bca8dfdc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in galih-rojak95-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2c3638c8846d100cacf3a258bc152902111c28398a8e7714b1a2e1bcb9b777d9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in illegal_lamprey_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9282bbd5afd6701b7c176ce8633ff3dac5892ff1c2cc520628a09bbe8048c67a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kiki-rangginang34-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3c7f0626b894f0294b8864b422a4084e8379d9650aa90e0d78738f6c7e0d99a6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mulyono-kepok26-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0337cec36a1a06ea159b6911ac5845cfabdcd10847ac2bea3456ef85dbea9bd1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in putri-brongkos73-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5a2a73c97a8b2c19fadf07b3e601bce023e0bf5621e3155d64a3d325a8593777 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rising_spoonbill_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1a89e16f5f07c003fbe8c804b534aba53792682935d3addc6aa40236826286ae This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in scared_mockingbird_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9e8329ff36a0d3fb7044c307349898cc79fd3736eea27407e0a0da39823a831e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tomi-kemplang45-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3dc3467beb59d17682d1cec4c0712096e9bdc04201ec147079948c81727df117 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in well_planarian_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ef02c4c3eee50582ad360446fab6d338b61c342d4376066fdae40143f8badf70 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in wibowo-jamblang14-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d3f190c3d1fafe66f4c4f2b9a9cd007e8f555c6d73b458d553dce5ddea7c37ba This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in yanti-pecel71-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a195cce38f8a6a2ecb73ae8e7e49f6ab2de330472fa614705cd2d40b4f759f7a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in yanti-sambel49-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b121f21c3e8c49fba30a088577a3fc3cc967061956575daeec4289e1a756c095 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in yuni-tempe47-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c1b6c5871449f6e4d65e58e3a21d986192d7fe23e1ccc86455064b52ec396c37 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in bella-jus22-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fd2e0e68ad2f116706c677a209e918e30b2638bb4f13949239847f14cfcf33f7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in yuni-ronde60-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cd08e8125e05759dfc1dcc05cfd365ae3a40b7cc1be68508d2d31642234f3781 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lisa-lapis39-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 37839d4aaacb7f9a2e63159159fec115caff7eb854844c02ff1dee75d38b86e0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...