MAL-2025-139124 Malicious code in yearning-azure-aardwolf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b07ec1100f6eb32f14c5c0fdec643e19b93d67528e9d273fd5c864fcc847447b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-138798 Malicious code in increasing-salmon-wolf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8a442488ef5caabca8bae9b82d2a185abf2102a99144d9978ab6d56435bbfa3c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-138990 Malicious code in running-silver-peacock (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 53fb3fefb14d33c5aa67f0e5b1c870659e1cc6a693e47837220d02ed2d396529 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-138687 Malicious code in empirical-amaranth-scorpion (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector febc4a7bc10d0559433e5fd29c4590005a340266a4e1fc611c8b9d8488b0fe24 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-138917 Malicious code in orthodox-blue-mastodon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ecdd7fccdbeb5a8a860588776e90de4bc8e90a50771100a4fd66e0ab1999495d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nurul-ronde16-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0f5a2c7b636c0bb751c3a0032b8100c55c9c6eebe3cdd2f4ed10f01bb9d2aac8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cindy-mie76-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d5a7a3b73b563061aa32d13d3d0b74571d2a414215c97cc1cc50148aac0a9738 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ogi-nasi75-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 975d95a4d96eaf87b5f3b7ca069d516531662d435c674c4b4980ffd74c5f0801 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in gita-gepuk90-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cc9b787407b77e649ae91076f5e8c6e6da1cd43e54a840add2a3d6b5cb69ba67 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lutfi-sambalado82-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f88704779b82a5fd0943f56457fc424f6f8f176ecf956e84622aa285947c4828 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in zaki-tongseng12-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c23b5794fcd4911fc07af36d2f7ff6560d5be332066fa2fc0c78fcd3f72d8e83 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in bella-lapis84-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 83084d2fe749f6d75b1a2138e08f376943df0f27be4f37fa2b52e2a20169d246 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in umi-miemee38-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d03c62f58d71a12d42eb31e1507041cdb7fb82530345f2af17e86eece39c0f87 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in xenacious_flyingfish_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 075c3a9379cc2bc0315b532e63311f00715950eb8ee8ace49ce9b6e7e7bff14f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ade-klipo71-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a83a13332e07d37bcf34073d8d9aada143a231cd4c72f9ca4f02e7b616af51c9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in zul-sambel7-sumpek (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e7bd90f1337b4168063ffaaae2baa72a39197b348381d3a0165ead53781c3e60 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in gigantic_mastodon_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 76c4b65354defd342f14e079a12badae7826d3985a5edd007ab783634d00b502 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in striking_fowl_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b1fdd50060a906e7f3d61dd50d726814b1ba44a33eaa56086f467f49fa9c5cdc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in joni-empal81-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3d362a836071af3b10facf873175780596b6fbf23029e46593d1163131e996d1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in eko-sambel78-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f4e407e7ca59da82112731259846b9bc8e4c7f57c640a345f652719825c8b108 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...