MAL-2025-71011 Malicious code in sweet-azure-finch (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5af537ca438726f486a4a50281c92a6fa4e5da8f62c107f27a4b5c14c1bd7a6d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ade-mendut65-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c443a0be3733901fe9ea51c257e2729431eaf221c166adc3d8b4bca6dea9c676 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in agus-dodol79-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a3d11ebea024c134d2ac505bfce5fb777ad17321a1c007cc650cdc0d05353ca0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in andi-semur3-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cf400ec00f8b316b59f8ab7e2f3421e488cd63464d028850aa3cc6cff2e80856 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in arif-saguer19-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a89f4e2e5b8a0b82048ae209b32d0842cf267b0e98890014260fda3c4944805e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in bambang-jus56-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5744e81ae6a90d9bc83e1399dab93f71786f493427ac72e8a367e694c849569e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in bayu-klanting95-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7a8cee9ba0b4bcfe766816b79511374ab37330126a8391165b12cc29ddac9e37 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in bella-lodeh50-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 013d2db80c51b5eb0b8ed21a208fc970aca51daa873b2a785ddab94ed9994897 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in budi-bakwan65-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 185eb99993c470128e6cca10e25b2e4d3d51ee2a90f4e052ff42bf55886192f2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in candra-lepet44-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d35166217d618070d040c54daba4a88f85f150f4ad7062466f9b1f93f4664831 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in candra-sate89-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7efb2139bb576095fa38e10f14074e6063c929bcafdb9eea02c9bee38e72c756 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cici-sambel35-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 74039bfb24860c69f359bd0cf0abded5e2281927bd6947472687112b26e48088 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cindy-lapis45-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b61cd2ddba09c8dec495dd3edf2f7fc5cbd99d2e1a0ceeffe7a91110c85f54ca This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cindy-martabak80-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7586a8cf52617d49d678e099a7a60f1a4a86d5842a14c55b6b9b64ec143c5edb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cuddly_reptile_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c4b2672886af029016765fb7607398d01393ed7004132e0cb6f4be322d3133dc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dewi-dradag60-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4a35bb5ff57152ce14a58782c61b4990912d7b3452b537b1d33db8876ba1ae9f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dewi-gulai78-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 774ca26d94670be43bddb462305a6c1f87e0c5abec35f6221f53183c23c3615a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dian-kue55-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5aa918eab9c7875af83f49dd26f601dd31792a0f3544692b48f8112e7cc29d60 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dian-telur76-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 98d24cfedcf0f028c39ab35c1a1b08739324d457d4cf13222b74a890d43f1051 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in eka-kripik66-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9a2271fe8877b8a066c391a2679e94f5b3dfd21b5d88d0f4fc43975834d49d19 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...