MAL-2025-138982 Malicious code in rich-ivory-viper (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 962daf46b363032432dc2cb1157ec479478716cd4c2e0a266d362de454941a71 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-138917 Malicious code in orthodox-blue-mastodon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ecdd7fccdbeb5a8a860588776e90de4bc8e90a50771100a4fd66e0ab1999495d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139095 Malicious code in varying-maroon-blackbird (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d532c4c516056ae0f4823fd186aa9df55ecff4f2fedd5d46ae96af890e43699e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-138687 Malicious code in empirical-amaranth-scorpion (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector febc4a7bc10d0559433e5fd29c4590005a340266a4e1fc611c8b9d8488b0fe24 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-138661 Malicious code in distant-fuchsia-toad (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a26d98847cb88065c9bd3145efb5221682bc8ce7e0457d51df25c26bc7920d5f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in yanti-gorengan75-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 068bbb5fd87e4b3226c90dfe014dc92eb339da930c5ae24d463e966312081dae This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mahesa-lepet67-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 419593210bf3bedb69d019d7c55346e7c5a7f858ceea927f3086f1f533441f8b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dewanto-lengko46-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d7ae22e1175dd726f14b80ba99cb7b88cdf77335a048ca3ec90a6a74581c9413 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in bambang-sego27-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3fb8e3e60c1cab51a08b3d4a6b11f3dbd09f1ada34200cbc7b5dc8ee2ef8009f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fitri-nasipecel56-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 24b3029858ecdb9ec16b7d0432efc67e0c86d886b8cfd59978acaf788dfd15e3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dull_bandicoot_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d27f4f024b4b32fb286be78b5b82c7166b5639b7135175fb19b9d7f49211cdea This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dono-keraktelor33-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fa9447d70f11538421728ad2a42dd80ed4ba7f274740a7c60de74f971f2aec69 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in maman-taiwan79-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 31e37e8cb1a2d11564cb22cdb84710980f2e3afe8e95537dceb4a651bd5addcf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in professional_anglerfish_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c796f94c26f8238eca81610d4d52757e9ddc4ee6318b9f1eefbc8e34b57e627e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in typical_frog_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 974e05cb0b8f853657b34fc08cb6fa0a7175d7b633a65ef6a4bfb3e85d8565ea This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in semantic_magpie_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 19e584f175300f1a5bf335c3b9d217028502261882e375e1d5060a7e944e745b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rudi-mieaceh53-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0e453b37f0f540731fbec7d7cbee2abc5f483e588ac06fa85b5c496256abe63e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in okta-menjes92-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 98d2d92c829caa739b95ccf565bfef6eb51751d5a724421310ac85f0fa1884a2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in laila-lapis60-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 426ef44c168aad30e6285e29adb3a7b55df90efb90aa9aaa07b71fa46b310b22 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in putri-tongseng84-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 65b760afd4dbf75da61cf70a29227f1bc27925f679a5c1b9c0dfe6c94794a3d3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...