MAL-2025-139148 Malicious code in near_owl_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ae380128e7d87d2b82ad55d13198e6560306659f85226e358b62b95cecfbad44 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fiscal-amaranth-aphid (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d270e11ef4012653ee53b617b958f166f6f81cdfd07cefaff96c7145bbb5886c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in legal-plum-goldfish (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fc9ebd375013a5644129963b13bbfe677aa152d42050d992c415721dd6c83886 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in historical-coffee-quelea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3b6593f025cf4fe4473f5fe807674daf7dc74ddcd5183077aec7803f195a005b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in t4mp0p0 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d8533adbdab71fb930973ad0a4455ce8ab1c0bcaca1c83b958ededb1a3286bfa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ltd-blush-mockingbird (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 74cc555f8cf4468a685484aef73571c94a18537eb2873f52557eee485c1a5907 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-138865 Malicious code in mean-peach-porpoise (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 47f0eb8e7ff15d8e0b06a0bee607b728ac17fc1c07735ace0058a7f88a933806 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139069 Malicious code in testy-bronze-eagle (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 793f2fe61ea3c591302a374c9a184d306c5592978faa341fdbc3b5f43744ace3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-138844 Malicious code in lonely-emerald-mongoose (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1d0039326b84e9139cfc3d916c40bf11f3e476dbfed30beddb7239571752ab10 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fadhil-gudeg34-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0da39ee1cf2d335b01fe9b205c40e93b070f23947b6b45f5993169871272bb62 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in gilang-nasicampur83-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0a84c6d28a572c9bcbe2452d7e0ef29a322e28cfea89a244a7af83a07e595daf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dependent_goat_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector af5f1c561ee3c091d1b23650b3b561b612b4bc45afb71b94cf7a8183aa9887ac This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in irma-sasag17-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a483bf00289e446d2f3eac0a96a840a83fe3b91c6731795bfde964d304841522 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in laila-oncom3-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 12c3224b41e77d6813ee5a545dd4c2aa65877e847e5cb51ae846987ec59c0a83 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fitri-getuk60-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1056cee7423596d3970aa4708727a70bf20a5c38b6ad7db2d29f490ab7115170 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mulyono-tapai2-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f5d27531598d9977d1366494a0737b6626f7e528e205ace7c419d7d6d735b13e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in gilang-botok78-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2f16743991a4dbef89548cc13421d7f54988df217798117749a5697f5dc25454 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in udin-sego65-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 822d586c7b593e4ad71ce2056034b514e560230e04b0b517ae891163e43031af This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in combined_bass_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ac79265d5dcfbc672bb33bb0d094ee78666047fcde73345a2d59af0a17173f2c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in oktafian-tumis19-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b92078f46f6d02a00d2d1929cb5bf2497a632091787aad43848720438047ff03 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...