MAL-2025-71580 Malicious code in widespread-green-turtle (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1b65909dfec1199e7cde9477ca8c9116406389e0d282184d38a98b39422d96ed This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71238 Malicious code in uncertain-turquoise-cockroach (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1869506b7dd4e94aabb4ee487f2edc20c7a89f3df5eb19d7a481db4401e39ca5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tepsimoba (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ceed2af4f30ac6875bb80041915462110c44c957d39d85fb9afcd45302e95c4e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69775 Malicious code in outer-olive-barnacle (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e70c6c4c3235c9d7e720432a75106ff836a8002f7561ebf613875264917c4907 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in andi-sambalado25-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dc28c89f0e5ef894cc95d7c09937eba1223140f65c1442cadbfaedf98ef083b9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cici-ragi38-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector de8e8f6f075253d728e1afd6131e34d3e0c7f876d42369bfbf92cebd4524a20d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in gilang-lapis34-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f3aaf29a6eb3d58084b5920b0b982dd2a2024b852ff8ed6b1a8eca99a0703bb6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ida-empal83-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 56208c2c1252dfa004dc6e0b5b8f6ac44d3c7a8ba12e8d9a6e876049362db064 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ida-tek63-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f22e7280574caaec1dc99981cb7b8d9f26a4c391e8927d98487c6d447c2058b7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in laila-kupang95-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4921bdd61da65b19b41728b4ca9e4b1773f025f068ee7557d187153c660b7dc2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lisa-ubi56-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f131efa5f45ca5550f79e12aa7b8ff2c126dbc06b86c8198af7a9349797def89 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in maya-dodol55-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6ce207268539b62738c8f27301e1731540d21d76ce78ff346eb16e2d38f75cd6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in protective_raccoon_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2ae62f138bb69b31b2fa5eeb68f45d80954f45efe14c315ed769ab86bcedf927 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sari-rawon12-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5a6e82c9f837c9f3ca86e6ffde99fdf67ec25e1efbd8f4f87e4dc9006fefadc4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in selfish_silkworm_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 03cc1ba2c7a55da39ce6abdb7f7ca8f3538beec5a2d8d43c5c4b437f79fddbfa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sinta-mieaceh4-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 42468aea13c60dcfe15468cb3d464fa2dc77fcb9cb1e6407b190ef4d2e9178b9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tiara-lutis52-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 44f49564e7aa41dd4556e051f56c01ded56147c599e53e542a31154fe9dd0476 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in udin-bubur83-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c4763af1f3f5b10978b4fefb3d86045110a503dbf08071aab2e175d6336ca452 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in utomo-serimuka59-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d0487bbe4e2a1b5e58b1cad6e871986f538a7b19bb8a334efaf22ba9d4b5fef3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in vera-nasicampur57-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 33984fc8bbcef0367c21882e7c197f4af0e5e9b43dcb8ea4f5968dbabf3d3ef4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...