MAL-2025-69439 Malicious code in misty-purple-parrot (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector eb9bf7c6a1772970d1726a021ffca4b464e754a1c77f7ba18f0370a35c68723a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70544 Malicious code in severe-blue-pony (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 69bec86011f3539747c365f484aebf1478bc1a826e6ffa3d9d3dd8d0e7d72dd5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-62236 Malicious code in cici-gaplek7-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e89236ae9bbccdbae179d14f6fa45096e723cbc73e87ae2282c36970bc50c69e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in wawan-bika78-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fa7624a71d155aba3e528ed06b4317db346dfcb49b745635cf86e6e724073e02 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sinta-lapis47-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 82e3d815d1d7b3f5b0cdc95c9288da65dedd54868275052d982fb06784a35ac1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in eka-kentang93-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f8ccbf3b6cd1885f59582a6d77fbc2126740fe588db23d2d556e6515d84b5d18 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in gilang-tapai6-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5501b788a6fce62564143ef9ae7f290d9cfe61f43e4efa52da6cdacdbbea677f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-65193 Malicious code in rudi-mendoan81-sumpek (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b4717e68c19530b5eb5703c31d2e4011e89e2839a970e68342e9537139f7bfb1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-65201 Malicious code in rudi-nasiuduk83-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bc82c0c306a47d5b5ef5680594669ce46802b49ab8d058b07ec334941acd0475 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in udin-wajit75-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d7ee6795cf6b93d9fad092fe7261580903ff76e71365f0e329eb61cf1427a368 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in zain-ragi69-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 79dba48a091dfd1effafba96a81d43a3f869f3ffa734a4ec832a7293757fbef7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-62470 Malicious code in dewanto-soto81-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ab157754e35f7ac13d0a3f717d68079b6f717031ddc22b4fa95898f38d3cdc87 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in varied_cat_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 45e32a8bf536316e295e9789d024cb197e67f4449db3c5afdee2a7b5c5ffd186 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in comprehensive_kite_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8f70523bee28e46c960b1f20038bdc4b77d72a19549179b1ed23a1d85188d68a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in limited_caribou_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 33e36c872abec55916628e27abc9cebd5affa4c5210acbc14b74f37706ce8aa7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-58986 Malicious code in tomi-sambel86-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bc61bef76c52f495296921ab8cd2096198a29e2b4488b8dc1af3e58cd3ccd404 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tiara-ikan78-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ef8685d2f203e1e38fb13d2dc4523619c671c02ff42b29c5ffacb0d0cf2b77c4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-58553 Malicious code in rudi-sate28-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 61959be2826ab6ce606f6cca9f02d2e382751b07fbb29d96e3528fb9cf88e0f4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in bambang-bakwan28-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 601e4b795364d9344bb5b23d6ae4b60b62e8c9e4d90ae9a8c98f313ac082fd08 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tuti-sasag60-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7f8cfe78e65c3d0bb3b3ee1572dd610053a0a2c151fbc1260227d2e026de5e37 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...