MAL-2025-139137 Malicious code in excited_silverfish_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector af86dbd8d335bb7ab0960cc1ceac104618c08690daaa5868155958023662b55c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in historical-coffee-quelea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3b6593f025cf4fe4473f5fe807674daf7dc74ddcd5183077aec7803f195a005b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fiscal-amaranth-aphid (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d270e11ef4012653ee53b617b958f166f6f81cdfd07cefaff96c7145bbb5886c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ltd-blush-mockingbird (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 74cc555f8cf4468a685484aef73571c94a18537eb2873f52557eee485c1a5907 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in t4mp0p0 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d8533adbdab71fb930973ad0a4455ce8ab1c0bcaca1c83b958ededb1a3286bfa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in legal-plum-goldfish (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fc9ebd375013a5644129963b13bbfe677aa152d42050d992c415721dd6c83886 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-138865 Malicious code in mean-peach-porpoise (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 47f0eb8e7ff15d8e0b06a0bee607b728ac17fc1c07735ace0058a7f88a933806 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139069 Malicious code in testy-bronze-eagle (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 793f2fe61ea3c591302a374c9a184d306c5592978faa341fdbc3b5f43744ace3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-138844 Malicious code in lonely-emerald-mongoose (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1d0039326b84e9139cfc3d916c40bf11f3e476dbfed30beddb7239571752ab10 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-132719 Malicious code in dewanto-mangut83-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7f5d9c1df8daf371093e6b7d53279675f9952dece7334324b10934413ab6135a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-138490 Malicious code in zaki-rangginang82-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 85db38f6e76cdc3a401bc0b5a77ad5a5fd80ccd879a0cacfc784ba96d3ddf0c0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-134775 Malicious code in keen_haddock_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2645bcffc1c9c208d95c209c2de41389e8bba37c844d8e579eb33e9a6e73921a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-137743 Malicious code in vera-taiwan38-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c45fb3c3caf6168e01329128a4f107334f4ba9b3d8864044ba8eec4e9fcfceb8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-134636 Malicious code in joko-mangga47-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 76efe43a75e80d32f0e07bcb24e13a1ca88d7ec041e2d8834e48493adbdf1263 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-131947 Malicious code in agus-bubur5-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a5956e715b0e08fc9176649e3663cb9b38f246acb75d33af8067ae602b5a0794 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kurniawan-taiwan31-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6a1b56e12243b419ae35a42c850b92d2393c51d14df213ca3b42f813d45bd877 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in udin-sego65-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 822d586c7b593e4ad71ce2056034b514e560230e04b0b517ae891163e43031af This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ade-lutis67-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1363b392447c5c883eb0ddf3d86a81b3a3ec81df09731f01b49983ac94f59905 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in andi-gudeg92-sumpek (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 61195cb323575d46171dce5415fc0977fad1df7a43f0ed1e6cbbc4598db28e0c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in citra-tek2-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e42154fd4da8ad75a0b3643dcac643e50c69a54e482da49b267e53f5964a9c06 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...