MAL-2025-139160 Malicious code in toxic_falcon_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d67a523c8300a06ad1b671247a199d7007231d224f410652f4ef2fd53da260af This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tight-apricot-dog (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 313adfe19a1739710ac40ad1d8d6f8cbbc5926b0f0885edbf374379c5f5cfd47 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-138909 Malicious code in old-bronze-bass (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c84f992a7c167603557b99a2d242d25449585b6f3a6eefd7d368f60a93ed729c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ministerial-bronze-mule (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 85b03000789c13c9810467f5e34f6dadc2704b04479636dad575ac93802b95d3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-138811 Malicious code in interesting-tan-roadrunner (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4b840a0b6ec6c6242b298dc58787a8ca6bd2f374e7b8ce6f2fa3b3dbba356d34 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in vera-tempe15-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 43c6a2d293ac06f4f4c2207c8454570c89c073e9c97ee6e42927e8810255f85f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in married_stoat_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f95099bc414f39b6ca73df095b3c04d04542c4464a3d5d63b03ee8f92e8aee2c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in putri-rawon47-sumpek (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3c5ac2e80a2d2143c2691378092961328a12bef8d8df942cbc81d2729a868478 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in linguistic_bug_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 55f657893489a78136fe7703a1e29b014d1a6229f77c8c1a6bf47f5ecbdc616f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in qori-pisang17-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6935f00c7ca824c4e07bf5b4a5cd97f5ba4cbc8fbe72e9ed1f6cb56b744779e9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in massive_hawk_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3d64f1dfd6ae2b6ff280231158ac39d8f7d81473f85e1d0a655ff6d08adc3fe1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in candra-esdoger51-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 15145caee9a41ade52ee976173c590230bd98ddd0d5307a2e5e1d2213d5fae54 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in irma-tumis86-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 90c1dbf24ff4595c734cb00f7bf8920cddc478f5772f9adc14b4963f50ffea92 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in citra-telur46-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d4bbf7b10144ba00acd0910c0f2671d5235e867958c2bbae25feb332eb7660d1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cici-bubur91-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0eca02479438726f353105e9832eb2eedb64fcebd2e9d5ebabc3d8313f21ce49 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in indah-miemee96-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e3622330d63f5cb6cb1e0411c7e10c71ec81d109d63d12d41c37252ec06e9380 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in conservative_newt_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1e25eca2fd24fc72a5e71d96f6077b5420e5805a70a6f6d53aa0e1ef92025008 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in okta-martabak96-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d96ee64f52d842127e06ec90e286bd0e0cc51c26562c4cb8c5f3eaeab6c79318 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in andi-mie57-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 99c957635a6a09d7e2f37cb3c68ea66c3febab9213bb68b63e6d4975835b2f07 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in bambang-ruwet45-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 01df9661b6c9f58f19fafbe9c993c308ed0206d907e16894059e0a260b65870b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...