MAL-2025-138585 Malicious code in agreeable-pink-orca (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 975f42095004558e2c264eef50b6062220d338eefbc544e78141142bf6a25787 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139057 Malicious code in surrounding-olive-caribou (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 51b64e4a56a725b2726b1b2ca6dbf6ccc1754bd55922937806bafbfc7344cb02 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139082 Malicious code in tory-maroon-bandicoot (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4cf1118128f7f95fa195586236283c5692f80b158e4907847a39edbd7299f77d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in yanti-kepok46-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 68342e7ab38981cfba6648a452663990ec2012f7bd72bc979b78b379f2115add This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in useful_kangaroo_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 909ac9524283c356ad9f1b0b12e4360298878ca6efa6050743d7ee62e36066fc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in royal_ocelot_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 12b8e16e5eea28e1f4b4259a7eacb1d4ebcf8ada0a88fad115793726f0a6a692 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in irma-pisang3-sumpek (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bd929c100d91a6a2f47dd17c45e60220509e0a41f9db40a21f73083bf9f9d423 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nadia-sate11-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 144bcdc1c7227e67fa2317c2efd4240783605436812bb21414015abe5211ac19 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in xaver-lutis82-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6ba92e36172a5103a0b0d023297e9091854faaccc4a94dbec50cb07e3a0d11ef This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lina-mendut25-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 823f477a170edf193142e4bc9b03a5996525800c10ff1e84579533c539fd3162 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in irma-nasi87-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b067dc380ee6a7da89006386c207409b6a1a72d4632cab687b268b0907381aaa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ogi-rangginang65-sumpek (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6b5c951f9a7d465d8ee00429b36d20c75656b67fe77fd932d26f76cf0dafadf0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in candra-keripik95-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bc2fbd4763ee31ce3d82c47f68729dc7f658eb8384438d01c44333b58a85bc81 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in eka-jamblang49-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b88f91e468671f3bdcaf98e3de172cadaa29d8b113cc9c8a27a3cdd4b4a5a625 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fauzi-wajit59-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7a2f3e1ee474e836b3016759e51716118c8076127387dbfa34cbc772fd9c69f5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in front_herring_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 765ca3c48dbf58152b560739836dd31f8d5d3d78ea51f0798e756fbb9e79d54b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in erick-tumis17-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 69ee2685befe30c0ed23fb99337833fd834afed800694d34972aa03ce931b67c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fitri-serimuka12-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 755c7c375228e7e8b4decf07407dad3c0ce1341ea1f7c3a759745d117771a30c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in right_marlin_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector eb796728e1af4adcf3194293ef5216926f5833680ef088361b7a0c090559f94e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in subtle_raven_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 792052ee8d43aa90e168500119796ea885085f57476d0a1357fee061b19f9582 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...