MAL-2025-66613 Malicious code in accessible-apricot-mollusk (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0e981ab581b7132e2f6d3f06ed5538db2a5441f15339cd2da29adf40f67a3aab This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in yanti-ragi84-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e761f85689a442ee6015f00b29ebf19b87f6b6195e0d7c09ad2f6449e79695ae This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in squealing_bobcat_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ae89b5bd18028471c3aca7fbf58184e252047d4edc78d46b6382f5da58694c50 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in riana-nasisayur84-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 80ba1c9e7958fe4916ec1ea80437cfc3fb25244c1fb676b85d9da9d8c8374c21 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kurniawan-lupis32-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b1135d13497036331745dcece5a33bbdd86ebdc982c30f4799b0c880ef4dbc89 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lina-tapai66-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 04a6a33e5deb7cb12601484b5a83975ce89de4d0ba1d7ae584ef8fbe7d6ff10c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in joko-semur24-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4eeddb2e2ff25c1e7f49d18c0131f7e709a6a18765b8ce2b67764ad9236805d9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in irma-klanting54-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3160f6cd07059d082b25f0896ea8ff190d6ed07d06ff5ccf3d334ec255047374 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in joko-lapis98-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 550a134328f80ffa4b1dfb72f16fc3c3ab2c001ee2f672aba812e18216f7dcb6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in amused_wren_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 50978ea137b735de6a9e538e8ff99d4f5c962a0d557c228b31fd9daadf5b82ad This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in agus-kembang47-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a26602f7d7df95238d65d9a7872c53fafcfbd6ea0e53fa2b81c5bd3621d1cea3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dewi-donat45-sumpek (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d58af4763f9418a79179e86b1185e844a9c087d1481d6b525d667ad6cc6c7ab9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fluffy_minnow_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aa6dd76e00d096c97e4920d74ebad0f4c016e48a6a237cf1668136073e07c36d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in opposite_finch_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7e3e4ebb73f50ea73f69acf4f5f8a1a9b767407191e62d1fcabb31d259753ad9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-62279 Malicious code in cindy-getuk92-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a87ac7ff8f1d9301f19ae5f53e79ffe842dda1542b6cbf8bd316c0f977efb06c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-63176 Malicious code in gita-ongol-ongol18-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 480458bcfba7aaf6d8c17960d26e0fd6cd29eb8ae246218fe28487dff2494514 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in gilang-bubur35-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d621dfb7facd97e3db0a96ed7c825c4c11acc9804b23de884799a1aaac1cebe6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kurniawan-kue97-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2c44971dcaadbac5d15338e272312412388e155bf2cc7f236623093714be6b73 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-65119 Malicious code in rina-jus4-sumpek (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 775e155076c86bd72739b499d299c52f00bcf203732733670ef349d42ade7985 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in eko-kue18-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 955def76fd9aff44c494748855360438efa7f674431ab518128b0293707572fa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...