MAL-2025-138989 Malicious code in running-chocolate-lynx (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ffb77eade9c851555770d34c459c181ac2b42fd29241f721bf91dcd1693e23d1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mammoth-brown-mink (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0cfac41640fd80e5a53b1801bc8d9c150c5fd613bbb318bc5064c0781c6477db This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in unknown-white-cricket (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cb81dd3f6a1c64968e6d832222379c22d81a0d68cdbb8d92aee62cd51375d7b0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-138837 Malicious code in liloyst (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f1fc931892e1340a03042f91e1ca48d04171168fa64ec768aed1aa592f2efd6d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in orthodox-blue-mastodon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ecdd7fccdbeb5a8a860588776e90de4bc8e90a50771100a4fd66e0ab1999495d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-138717 Malicious code in fascinating-coral-marlin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1c8f65e9fdaf8502289c4e3097788b192701db6d4ed046852d818449c6ab10a4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in immense-olive-octopus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 02656cceb4e7ac01cccd5f7f32289d5e16a49c1b8bc908aaa45b22a06f90fc0a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nana-kentang82-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9c6bed8a265644246466391301f3703a02f0a749059776572e099ecb09a7211d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ok_fox_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 46cf3a6faf59fa6785996986ff0be567ffc6443ff4c9728f9f76b0c830ecb93e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in gilang-donat12-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 32da3d6ef4265d4d4618adbf11d22d961e5771c1cf7d86b926b38c0506400991 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nana-takokak15-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7bf63332fa47767c8c10dab12532c3018c5845f3829d57af0916b48c7670d024 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in erick-ongol-ongol19-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 87ceb83df9603b0e1e7662e4be5714c0a85d7027d20c001e19c93e86c67413c4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in gita-lupis30-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e87bb27af23074a493d553f2b667cb8a164a088ee50c32ba8a8f8c3df0911aa0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in putra-telur98-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f772091fd6554c09e83d5aca81dac0829449d318afa6404a027f9ab6b7c0d40d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in putri-mieayam23-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0c3761d6524fdc9f3ca2f0f9fa30be4cbd44e35fe30b695eeda99b2f94444260 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hadi-sate60-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b223a79028294d4b43209ccef30b45eceffcff7b4aa6ef2f9362ca1b36b231ab This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in citra-lontong46-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4ff91723ea4599a21dde7f3b18c953288ba61edf02c86bac778bcde201ace9c2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dian-empal58-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e5f90fca42aa4f901eac949da3e025deab773192bf543593bbdcc3fdd135885a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hanafi-gaplek74-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 78b95b3b1a2489f422f4b48e1e038fe1be36e506c54561ff57335ad8ec97b412 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nurul-sate73-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e66e5cfb351aa62051b110089f1f3bbf3f9ca667dc60208af311b45b57376503 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...