MAL-2025-69526 Malicious code in naked-salmon-egret (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 46db56460849df63684360b7fc715cc8baef7aec6d0c6f85808918026e0c6a75 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cici-ubi79-sumpek (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 178d39d6bc1cdada5b5864abd56df14691238261508dd6bb17475c2947690d9a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nina-gepuk13-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3fd554b8e43bd0122a41ab1ecda2518c6f7eba0dfd6022d6823fb60ac9d118cb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in irma-mangga39-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4e456bf6eee04362efde26313e2d4c7032f8e05c749e2c8dd5492f1cbdac7c56 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in arif-sambel55-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ce75931bbcb20e485fceac91b690a9fc67f41b307c15fea611db20d0d4a699fb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cuddly_reptile_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c4b2672886af029016765fb7607398d01393ed7004132e0cb6f4be322d3133dc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in erick-brongkos67-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ce2bf3cd30db3548c7973db621af18e8279f7712f1145ae5eb01c95e93f0e2be This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in bella-lodeh50-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 013d2db80c51b5eb0b8ed21a208fc970aca51daa873b2a785ddab94ed9994897 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in umi-bakwan40-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 75d1098cb90ddfd8f086c9150c1aafdf9c7c290e2cc078718647973c7706e389 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in negative_warbler_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector abdd919faec568ab1912d95d7aa60dc45e1ef157827aa6e9a37ff6491f962923 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mulyono-mangut90-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 87b8c706967d434aeb587a2ae0c6d983fa551dab1fc3064fd91409b381da5957 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dian-telur76-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 98d24cfedcf0f028c39ab35c1a1b08739324d457d4cf13222b74a890d43f1051 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in okta-empal79-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 248f9be927161ef7fb204c9d7c7eaeab0a1553523039468842157b04ac437089 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in utomo-lupis43-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c996bc224867b669c3f1f5f35a594141ebfec500de63973e7a630da96aab34ba This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kiki-empal37-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4ee2630093e3fe8bc88442f727e238852667ce131fc630efaed287494b480878 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fauzi-ikan63-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3fc02724f564ba67d2d0201432ab24ce7b3ac43039ae58d1408535598d89179d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in eko-tomat45-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fc58a1b423398ddf2fb0a3ec3327fd0e81647dd20be0e6ba4307186f1fc73cf7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in zul-gudeg68-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c38ea07072ea15606ce14aa6b661fdd622acc2c88eb339ac880593b95537038e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in wati-tempe12-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 058a3d59af28838e26518e74563beb62382d8971b2ba31757fd3184a6e1afd03 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in surya-ongol-ongol5-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a747b2962493fe01bfe6904c5bf8025a54edb2ae2fe33245fbc319f5b0970e85 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...