MAL-2025-139119 Malicious code in xenacious-brown-hyena (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 54eb2cdb1283d01c460231b7ae4b4fe44cebb1bb58d596ed8c5d5cb4dc091fcf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-138711 Malicious code in famous-beige-tern (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1c394683c3a56d492dc7a409254c3ae7d7f5000509e733976b71cdb97b8dce4c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-138689 Malicious code in endless-indigo-marmoset (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d3276be6f7155bbda1c434bbb2706834047eb7f9ee634526192a9ab077e062be This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in vida-gorengan31-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f7ef336c9930c113066be97824308c485a74a83e27a434816529669cdd2799fa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in patria-oblok48-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cd16667aadadd9d2eb9ee2bb44b92fc12e45d1e1587f2f447cc2ac701ce348f7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nana-kue73-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3ffc8d3d6058446b59afa8b0ffbf7eed249287920b5d5ee66788eaabfd8e1e40 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in umi-asinan29-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1da26d9de052922b07b16c6b443d1f18344b10cb592af2b8e28ac5d93617bf02 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in amused_amphibian_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1bf362960035e9edd43f9dc8dc276e8d2c87371d0fdd04b827b2b441126fe1dc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in yuni-klanting67-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cc43223cdc3e0369226962d40658351263e9c97bce728c59cba65509c98b91a5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rifqi-pecel34-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1ef6e40440422215e4efc6011e04a76d230f81b1e1d6152bf57509b738a95e7e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tomi-dodol41-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f634d69b1e368034062e330d1ef542084bb287e3e2268e447fa9283060c82855 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in erick-sego84-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5aa7c0a697bb0993572328ce5e95aedece1a83aaba0f31fa8c63b8ac50fb5f74 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in arif-gandul61-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 946b5db9ea6c7b91eaada5f4db018a96acf283c58baf6822a663d72f0c933047 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in injured_dragonfly_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e69a4b1718322b92d918205dd95cd6c8a76f52973bc449c36000c594ee4c70bb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in iwan-rangginang63-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cc4fe15b515a03450ba272178c1c2b7eba4cfe5908e942d63eab690c24a747fd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in gita-lupis30-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e87bb27af23074a493d553f2b667cb8a164a088ee50c32ba8a8f8c3df0911aa0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in joni-tempe53-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3620465b359dde723ba08a4db40a653a86077a815995a5b4a25e8b97b471f77a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nurul-gorengan69-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9a5f173870da0b4ac7d6dcdbe418701dc25577feb788de6125ad504428269d7c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cindy-keripik86-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bf62e05a2b1498223f2bb3e024eace98004639cf88514b280359979e5c1f5ab5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sari-bakwan41-sumpek (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ae0fedc544d177f2cfe84754fe34acb3df0958917be2a583bc0085600323d9be This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...