MAL-2025-138917 Malicious code in orthodox-blue-mastodon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ecdd7fccdbeb5a8a860588776e90de4bc8e90a50771100a4fd66e0ab1999495d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-138661 Malicious code in distant-fuchsia-toad (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a26d98847cb88065c9bd3145efb5221682bc8ce7e0457d51df25c26bc7920d5f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-138687 Malicious code in empirical-amaranth-scorpion (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector febc4a7bc10d0559433e5fd29c4590005a340266a4e1fc611c8b9d8488b0fe24 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-138982 Malicious code in rich-ivory-viper (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 962daf46b363032432dc2cb1157ec479478716cd4c2e0a266d362de454941a71 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139095 Malicious code in varying-maroon-blackbird (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d532c4c516056ae0f4823fd186aa9df55ecff4f2fedd5d46ae96af890e43699e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in vida-ragi74-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector eebf98bc271b4716281d1dc06bbaed490040694a8c931a0ad00afe87ce7041d3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in primitive_lemur_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b9cbe94a8a555f1242cb985ab6cd19921ede8a805409e614fb47a8f8ed52f5b7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mahesa-lepet67-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 419593210bf3bedb69d019d7c55346e7c5a7f858ceea927f3086f1f533441f8b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in wati-botok85-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d2f3ffb75c5f7ee573c505587cfa7e4c5ff1d274d8d8b25693406bac53132d93 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dull_bandicoot_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d27f4f024b4b32fb286be78b5b82c7166b5639b7135175fb19b9d7f49211cdea This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in zul-sambel7-sumpek (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e7bd90f1337b4168063ffaaae2baa72a39197b348381d3a0165ead53781c3e60 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in jaja-tempe84-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d21c88f5a91c91c252be870a034fef6b68eb398974749c943cf7921155fd0a42 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in oktafian-rujak83-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1becf10809121c697c27a6947494cf4dad4129c93ea65a49facf37faf8f8248b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in vera-jamblang39-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dce02ca2f748e1ba5a5fe2b988c1f4da1d82cda7fed2e253867d94fb1b4d736a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in erwin-soto30-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7499440501c25bee16d1eeec578badacecc7ff31f31d48dec0cc4fec78b354df This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in yanti-gorengan75-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 068bbb5fd87e4b3226c90dfe014dc92eb339da930c5ae24d463e966312081dae This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in vera-buburayam75-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 075147793c2ab0167d0d7baf8505520f18ffe852f2854b46ad033b462630b11b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in putri-tongseng84-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 65b760afd4dbf75da61cf70a29227f1bc27925f679a5c1b9c0dfe6c94794a3d3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in gilang-tiwul36-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 19a67ade412168827b97433e58042bb2cc6bd39f61b98fd9e6693309161fa1d4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dono-keraktelor33-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fa9447d70f11538421728ad2a42dd80ed4ba7f274740a7c60de74f971f2aec69 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...