MAL-2025-62604 Malicious code in dono-lodeh40-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d6a1aab19b348fe99e44f99c3ab55c8169d218aab256cc8bdba6262a720c0a5d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-63103 Malicious code in gilang-donat2-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 376f184eae920187271448cf1a10009c8ff19aa79858642a231f49d0536042f3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-62922 Malicious code in fajar-martabak61-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d7fe929f23b2d8bcd6c7378229887741d94c62c626c1a4823405bd927e012244 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-62675 Malicious code in eka-mieayam89-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 37c87645e730a2f4790ce26acc7ba0bd383b23e4e3761ed6656116e9cab95a0b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-63617 Malicious code in jaja-esdoger7-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 557a882d069bf5ed48771b9a9fc6ec58d8b37142dac62993c5693f7c18fd1115 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in indah-gulai56-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 94ab725c705e20c2863abf5ae7671fa1c9d55800bf3fd0b4e19fbe67cdeeb829 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cindy-enting22-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 45f1d4bbc160ec0bb872a8e82e283e32b093dc0c20b31e9a43129195404f3855 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-62225 Malicious code in changing_panther_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0de56ffb6c6b66d7c0f9d61e74bb9609607a1118ee2100a39b2e727e3099a8d4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in left_wren_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 81489581a0bdb06ec72cd3e6013581fe2e870ed132930db2fe21fd37d90916a1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dewi-lapis2-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d8d2f464d8b7464fa4ba740bf5d5866078b5e0e9603f327b720b819303cdb504 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-64376 Malicious code in mulyono-teh47-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e74ac4829581c45e9890dd9dae059ef67a053fed250dcfb7a06ef0f56ac3f56f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in separate_ferret_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0488a1e1fefdf41a65678817c47df56ff7243cec083360da93a7718a1fd6be98 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in silent_rattlesnake_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4ac876886912d6176e3a7f291f3aae59f69a1122fe34ab6e30a8233d2c05f302 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-61240 Malicious code in scattered_gazelle_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector df6699df875e446ebd80bcc9ecbd3efbc3fc6cb61cf66c2a6378699e48b5df76 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tomi-semur64-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 432ca83a285f81728540c9866bc18f38f24abf2787dad49a42903f21c2e9857f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in eventual_puffin_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 77d461513a5b61c60ef0c576ba4664c7874ff1d77ee761cb3f0dc54e51380a7c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in complete_bobolink_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f93ffe03fd32c585e3b89db4981613c7ea0b3b78ce5105d738d3e9e54210ebef This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fadhil-mangut23-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ca782b1e866cc1603c9d8a83f001fc14a73a85296bf31f3cf9a1edac07ce8b8e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-56814 Malicious code in indah-gembus3-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2fd841ec6eb246e1a41a705066c275640b331d17ed44721a671428ebc24e80b1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-55473 Malicious code in budi-telurtahu37-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5121f43a43a138a266b7992a67e61b6b31314fadfb4ea25e9bfd8ebf3baf3979 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...