MAL-2025-66691 Malicious code in aesthetic-salmon-limpet (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cddd9fdefa56d8cfb917e42f59b538673173d341e5a1de6437f11f028f82d35d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68875 Malicious code in industrial-ivory-python (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 84f4091b09dd34c2f660257e6736992d2586737212b3178e8e0419ab6aa3be66 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69202 Malicious code in logical-coffee-chicken (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1a36840e14eb06b73629df8f2da5139f5bee9627b9047a9353e14067a7e52c49 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in vina-tongseng86-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 69796e30eaecb5a7493cc7a98953d3ae46e0143bd05899876edafe29e524d035 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in erwin-papeda78-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d010cd9afb6fe0abcca2d1e0010f9fc7de502b0070f343e48acb5b14dfba3f4c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in jaja-gaplek51-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 58d006e4232b423ff962a1c326a5e8a050de0508cb16eb7a6e366c5fae7c3cb3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in architectural_coyote_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 20c74173ff04b8a461d1ab136a475cb9c8520f592711a7d6cc762c26e5e51219 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rational_tuna_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 95d0a9cf24323da6fb4a40d687fa39fd438002d249b2f3564643372a154b6001 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fauzi-rujaksoto11-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1a7784c7b3a2782ed9b0d4dbb84314cb7db8f0be1ccc3b0fcd9edf01ae824b43 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in wati-martabak9-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector adc10fadc01af15a6ad087a982a57a48e5988946dcac472b4c473d7c19e6875e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ade-serabi3-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1035ded713f6033b7556466d56f56780f275a37f149ad7ab551fdc8b8bc777f4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nadia-keraktelor78-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fc2c57d232caba72cfb03d4031b005a986b227e924a7ae1ea1cd290b81ff1307 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fitri-bakwan40-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1d5952f68803d03f942125ae80bfe381ca8c214e875ae96f894d29f659400951 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fadhil-gulai9-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector df4309d07c7da2406d877482fe74167fdb38dac69887bf0f982e8d0b1177863a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in bella-lapis83-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ca19c17a6a49e1b55b08a828808efed48b1b6b9a52b785c942b8c0b1f91d24a4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in jaja-bubursumsum39-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 595c3a7970f8ffc9512a145d852653646264a4a70d0049b47c19f0b9815d2252 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in xenophobic_skunk_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bf86663e5bbf464c2ef92277c0d0079fd09a8e80c402e687c28c48bebe8fdfaa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-64062 Malicious code in lina-wajit49-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2d13c86cdb3cb26fda124a0f93eec029895915f5a2cf63b8ab4a2d497ae5003c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-62278 Malicious code in cindy-gembus73-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 794757d949159076d68b6ff6157a214b163f439b65a1d47f7c56fe2702e7d76e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-63426 Malicious code in ida-liwet64-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dc9005a5ed5d552b60c2e38294e3bc89c188dfb6ebe9f031d006243b4c85ede7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...