MAL-2025-139137 Malicious code in excited_silverfish_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector af86dbd8d335bb7ab0960cc1ceac104618c08690daaa5868155958023662b55c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fiscal-amaranth-aphid (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d270e11ef4012653ee53b617b958f166f6f81cdfd07cefaff96c7145bbb5886c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in t4mp0p0 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d8533adbdab71fb930973ad0a4455ce8ab1c0bcaca1c83b958ededb1a3286bfa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in historical-coffee-quelea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3b6593f025cf4fe4473f5fe807674daf7dc74ddcd5183077aec7803f195a005b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-138844 Malicious code in lonely-emerald-mongoose (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1d0039326b84e9139cfc3d916c40bf11f3e476dbfed30beddb7239571752ab10 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139069 Malicious code in testy-bronze-eagle (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 793f2fe61ea3c591302a374c9a184d306c5592978faa341fdbc3b5f43744ace3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ltd-blush-mockingbird (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 74cc555f8cf4468a685484aef73571c94a18537eb2873f52557eee485c1a5907 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-138865 Malicious code in mean-peach-porpoise (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 47f0eb8e7ff15d8e0b06a0bee607b728ac17fc1c07735ace0058a7f88a933806 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in legal-plum-goldfish (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fc9ebd375013a5644129963b13bbfe677aa152d42050d992c415721dd6c83886 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in vera-taiwan38-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c45fb3c3caf6168e01329128a4f107334f4ba9b3d8864044ba8eec4e9fcfceb8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lisa-tempe8-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0d02f71cf364aeb2e5e1cd57a32da6a50e4dde23304486fe5dd6dbfb2e6226c3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in gita-sate30-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5a0865e2efcc8cfe25d437b0a477f0c99dd44e397c935775b84a1fbe443b6ddf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mulyono-toge78-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f61d0997bef45c7a160da920b8eea4a87fa317525a9411018fda6c89b24d8489 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in underlying_chameleon_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 67bd7f342ce77d972287e069d09a1c271eb6089a9768e1f995062c58d5dd897d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in citra-tek2-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e42154fd4da8ad75a0b3643dcac643e50c69a54e482da49b267e53f5964a9c06 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in gita-ruwet5-sumpek (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 54908e9442a25622c95d56c38d43ad085c80e4a5a7d7d7ac6d56fbb58fb37149 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in coastal_pigeon_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 38947f5d75c5ac88b129b9d6f15ef3f1fcdef746cd6af030c7a0a49f95fbcb5d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-133383 Malicious code in fajar-mieaceh2-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 75674e2fecc0e73bd080d59c33f035dfe26e56d71747b8f028803bbb0ff8026c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-135618 Malicious code in mulyono-kolak58-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 15c37eca51a092d52375ea75bbaec614449d04ee4ae56a89d9cb8e20ddcea090 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in galih-gaplek40-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b8af853a00844ce6ae82249163360ed5ac1e4864f5d12c4946295c4667a7398f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...