MAL-2025-139127 Malicious code in yelling-peach-wildcat (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 829994b9f23f5e676f51c94748f0165c1855210eb72af32f09e3fb6cde81b34d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-138651 Malicious code in delighted-ivory-rooster (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d00e5c1f68d6d37f5b8fab0f107d7797627bd4c27009816cf3f7f5011c7a0882 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-138905 Malicious code in obliged-ivory-cockroach (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f362365f89f3750073cc6692175242c5f2d5c361a74f6fd8942b5560b6f963f5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in honest-turquoise-elk (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 98b24c315bdaaaa70ffde94ffa47dd1cace75a29f6a70c897672941508a87bd4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in scornful-white-squirrel (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7e422b66bed3d80f0733b0c7d3c2bea50a5c6e7745260fe81f61776f9c118c4f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-138678 Malicious code in eastern-bronze-lion (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b6305424298dc1af505d2e06c3436f83d47e73b4f623105f2821fc44243a3f65 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in surya-jus22-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0c6735da0bb63f702728090ff88be2bdd7dac6763a947993b9b6d00411dd629c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hadianto-rujak52-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector edc94973c63e8357c2553429a9a3524287de47bf9ee160f27f9b2f20ec88be56 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in vina-tempe71-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c02156cd881e85734f0c34c5321e2db952f8caaeddefac86d688b73e36033af0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dewanto-tongseng16-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 081bc6f0cc91c8c162ecaaf90dc04d62a2aacd753fa1050d28b2dc7d3952294f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ogi-serimuka24-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 67ad3872f497f65096715f9bbb27491bc2276808cb0cf5e33089e1eacad475c9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in eko-bakwan88-sumpek (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1268498f1ae70cfe75f49d29259a48d994e066413be08ffb8384b086f6af3253 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in xaver-getuk41-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 38a1cd65b707925c21113d76e00020b1a70f5c49de185fd455655ffa4492c7d0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in interior_octopus_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fe18436f3821f2cbd20cd2d8b857a229886bbc2eced26c83c2c85ad9e4560ab5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in erwin-liwet94-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5d8c67f5bfa719cc12e5646e6ae7952c97dc19722f4ad978a5ef6e8cf691a0b3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in erwin-oblok36-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ee160eb465eb03c877657881c807ee60bb0f07366c432a460b99689d99a60411 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in unconscious_kingfisher_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5872b604f7d40a610c1efd724063e5837f8ad18b24b1eaf1e1f74501504f5be2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in maman-nasi45-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b07b1767d54cc8ee96cc3b6d42698d3913b8d30bf3b850a08c1b7cfda7751704 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in umi-gorengan23-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 19a986545645c2f5ad5a750f7e0f400229bdc2e4a3495d474903e457d9e97f82 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in surya-lapis75-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b32d8debecd2e44c0410b4c59b211cff90c6cea2c0a8d57d770cd8c588786efa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...