MAL-2025-68425 Malicious code in frequent-jade-spider (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3bcecbabdb17d4da973d00990b7e0979ae957049cefec48de628ad9d6f1f49bd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-66903 Malicious code in aware-coffee-sparrow (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1da6ce34eb3499d4e79dfa0bb48c6ea1070ae979a83510f8c532091541ddaf28 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71324 Malicious code in unlikely-cyan-tiglon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2c0e0f4ed93b6c5a872f35cf86bfc8ae13d8e209df79e554e42e6a5c6ef7f5b5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ade-kue8-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 29525619b24cd3ad15ede6ed22075b2440f059507557143b3b648fb0a90d7fb5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ade-lengko53-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ccb8bff05b37999ad92c1e3b2bd9fb712de718d3dc67c5e8207ee9429b3f6b0e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in budi-buburayam88-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 692ae2df288fadd3beeef324db76f4a5226e09c2d3c8be3fb52a067d9ba1b616 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cindy-gado-gado91-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1821682b1c70a632cfc1e80befbee4f281119410845a1a2b043d2b3a74eb4e8a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fajar-sambel61-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9e8a3d8fb9c1ca619ec683253c7db8a152397c1d01cd70767d3e403eef055b7a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fajar-sego100-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 374fc2ddd115d721cc5849459b746cc7e5110d1aa1f33683e75131f1561e2e13 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in galih-otak-otak80-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fbaf5c7b10573aba24b574d0282a07ce4e060590b31585890b8236dc4c66d514 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in jaja-miebogor84-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c492f73940e63c252e13b663beb79117f45fd8a2ec0a86354430d0d5563e0f15 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in joko-nasi33-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3a1d1a24ab1e96f476981518ecc922c527d7eefa0bbd3f766b4360c0ff03a4ae This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in joni-kue38-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 83bc0014f34d4110d1a399243f075d5b87e672025fb9902235173d0776f1f344 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kresna-gado-gado59-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7d66ef7fd71d6bb10ed487055d40879f03bb14f0278cf2d1ead13e864fdd4c4e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in maya-miebogor10-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d8e7bf638942b515bdfa02bd9afbbf1dccd75cd28b35155a286a1fefccda3eca This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nadia-tempe1-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6b83ed871da0fd71c3b7152f45fb0932ba6a4f1c3c51885aea60ba7a7a145937 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tania-mieayam85-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e05ecb1056f4ec78036e34608b30cd8667fe30ad09f5a1850fefb3efdbc89eac This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tiara-tumis18-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e37d5d29a0e6a99975bb9e8f97bdea5bed1618a060122ae9d42d20c1c1ad7a28 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in udin-lengko6-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 24c6562624f8760302fdc4d20900d451864c356c66424c87b1db8cca19ee9985 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in xaver-soto10-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2b8fee0368e83a3233b390be4fd5fcc259ba2c7caf917ba2e38b7f9e1acc12b4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...