MAL-2025-70428 Malicious code in royal-olive-limpet (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3c341bcdaaed3945acb51c1312b486e22ffa89bfd0169328df8631862d077bcb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tepsimoba (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ceed2af4f30ac6875bb80041915462110c44c957d39d85fb9afcd45302e95c4e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71580 Malicious code in widespread-green-turtle (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1b65909dfec1199e7cde9477ca8c9116406389e0d282184d38a98b39422d96ed This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70152 Malicious code in racial-amaranth-lizard (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8f200330347de6690edb8cda654e69b76db589ac0420ba01df4017a4b92808ce This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cici-ragi38-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector de8e8f6f075253d728e1afd6131e34d3e0c7f876d42369bfbf92cebd4524a20d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in gilang-lapis34-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f3aaf29a6eb3d58084b5920b0b982dd2a2024b852ff8ed6b1a8eca99a0703bb6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ida-empal83-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 56208c2c1252dfa004dc6e0b5b8f6ac44d3c7a8ba12e8d9a6e876049362db064 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ida-tek63-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f22e7280574caaec1dc99981cb7b8d9f26a4c391e8927d98487c6d447c2058b7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in laila-kupang95-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4921bdd61da65b19b41728b4ca9e4b1773f025f068ee7557d187153c660b7dc2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lisa-ubi56-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f131efa5f45ca5550f79e12aa7b8ff2c126dbc06b86c8198af7a9349797def89 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in protective_raccoon_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2ae62f138bb69b31b2fa5eeb68f45d80954f45efe14c315ed769ab86bcedf927 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sari-rawon12-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5a6e82c9f837c9f3ca86e6ffde99fdf67ec25e1efbd8f4f87e4dc9006fefadc4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in selfish_silkworm_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 03cc1ba2c7a55da39ce6abdb7f7ca8f3538beec5a2d8d43c5c4b437f79fddbfa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sinta-mieaceh4-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 42468aea13c60dcfe15468cb3d464fa2dc77fcb9cb1e6407b190ef4d2e9178b9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tiara-lutis52-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 44f49564e7aa41dd4556e051f56c01ded56147c599e53e542a31154fe9dd0476 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in udin-bubur83-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c4763af1f3f5b10978b4fefb3d86045110a503dbf08071aab2e175d6336ca452 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in utomo-serimuka59-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d0487bbe4e2a1b5e58b1cad6e871986f538a7b19bb8a334efaf22ba9d4b5fef3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in vera-nasicampur57-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 33984fc8bbcef0367c21882e7c197f4af0e5e9b43dcb8ea4f5968dbabf3d3ef4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in vina-gandul51-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fa71e7d13c64be8c59732c5dd04fd763a91235891886729c42feaa8e9bbba83c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in visible_dormouse_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 43673fd60f823f9adedc56990bbd2ccb26d4f31f003490bdc774a61b98f8b5c3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...