MAL-2025-66867 Malicious code in atomic-coral-marmot (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c3070d9ee9cd3d4ec1e60f8fceed90e5e500a86e40836fc881fdc2a9902b5d3b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in strict-scarlet-lungfish (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cdcd88c111ff51f4bf59820e4865bdb62a498a7275268bfd59baf4c95490c8c5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ocha-tek74-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b02baf80dcbd02336cf9f49143b86ab6415137f6cc26f4565399ab517f43112e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in promising_canid_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b7ac25117663ba2d19287f554cc3f66729218f7badbbaae12e0ab25b0907daea This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dian-liwet2-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0bc7145acd7768e2d6c3156158411a9ef57a530b9fcf81aa669ff952a5d32c05 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in interested_whippet_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e0e959a6eeba28fd3282b1c2af9e37d5f8e1ae0e90b369a8e91c2f30de8f0a20 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in citra-semur34-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6a0d1e9c46e8e58bed49f926435aa527ce60d9e6f8612dcf867c7c7f9db36ebd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in surya-pisang58-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 776572e7f0c87ff0eaa2eeca98778b955b89640ef1cc80b8350e3926561ba154 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in gita-martabak27-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 64f2858f05f5b93fd3cc38b8e9ebd800a211ea7c7cdcaf970f696ba996e2324d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in umi-oncom42-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8f819eef9e1f35a911c60019c992a26b56f7146b02a0477a896de3f2b1e24865 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in wati-kue95-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ebdcd19da0a29b8ba29b4c245c1e4f435dc594069a011a2cdf895f389e5af39b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mahesa-peyek99-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9207b182b8ef176b673f32b6cd683c563c08b4f2d5c8ffa03446103b09a4cba7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in jaja-bakwan85-sumpek (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 702b7e59be2f75b8465443445ccbe7f41f3bb74fc4fc0b770520b15e8f5facfa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in qualified_beetle_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1c7ae34f69681b42493995fc1da1ce31eb3b3fc54dc11ea9c0cdc856033ed446 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in joko-semur24-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4eeddb2e2ff25c1e7f49d18c0131f7e709a6a18765b8ce2b67764ad9236805d9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in siska-kentang39-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 72de2b41a3d2d59297a3e00c1f73b8e41bfcbe57f675468dae96a8b16e724d30 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nurul-klipo68-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 842a66f69a679c8ba253a32496e218d753652e0d1b0509503a72f0471a38ff4d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hendra-kue81-sumpek (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4e9407b2fe65046647280147ab514810930380e14100ec6b1249e23c65887186 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in clumsy_jay_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0d070b53395981e5471521fbed60eaf857d3ed7148fd1ccbfd4956f72bde59d3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-61754 Malicious code in ade-kue57-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d39c21517fb48aec3bc48b716582e6fa25c76c9966c4ef06c8fd89a1fd3f037c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...