MAL-2025-138949 Malicious code in protective-beige-falcon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6c6aac03809a0c8ef6e792cf5f5195ca407ecaa8858f7fd86d1dae5151126355 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-138743 Malicious code in fundamental-blush-skunk (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b2ed089808090f82a85756d109bf37015240f922fdcc7584bba270a1bc43f6a9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139108 Malicious code in weary-bronze-barracuda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4eba78c701c91e88fce0d28506d839c47d359be22863e170d20f40a50262e76d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139063 Malicious code in tart-rose-crow (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 359d4a973890a901b9cf2a2f53d22c42f39e5d00db20fa610c5d9f7c32ced517 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-138995 Malicious code in scornful-red-cattle (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b18b46222ad56058a14b9ba315d2d0e6059319d63a2237f9869a98de121dd992 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in only_beaver_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f86b0b1b6155dd3006e7e93c1e7a95bf727fefa2a18af57766d6e35d1001b637 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in manual_shrew_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 143319c283d109d52d2a33f42f17b2876027e9cd7b2cef5ce20654e7e78ba425 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in favourite_mule_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4bde661d3fd85ced784e0baa0164bceb1e4787f8c5a5ea0898ef0d3415009441 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mahesa-rujak19-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 00c0185b4eaa0d2d1570aff109e296af8921b0fd2096b525e8f6d4ea7d3af7f3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in oktafian-kupat1-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8eb2a04b1fc607503cd1fa56a8c7a1629356aeef3c099bb93044ac7c7811ebb8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lutfi-dodol26-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 52f2bb29caccd3861136e0e6f3ecfe5ad88ac6ca5d60d139bafc6aa252877510 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tuti-kue45-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b8494987b11c94a5544bb70ad71044806de16fbc0850f27033ab4f5efa1dfb83 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in simple_narwhal_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1e9a3f82b382e03bc5705ea2bfc36cf20b2a514f0ac256fe51c09772b12355b1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lina-gado-gado86-sumpek (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bf1daf77eba80c4757091526ab6cab03cbe53f996d6a847876ff913caaec9a1e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in wati-klipo20-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 331596c998254826e008776c212755966e3072e89c1a3205a70f97f34460996f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in yanti-lontong85-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 254aef3255fac15eeb8c546ea28e359f3d1a639c726df027e391d349b923a998 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tomi-dodol27-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8437a803a219ef546c99da2b22c03156ecd6f0ee13d13e8f51898a52509e2508 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in udin-kue67-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 59526217b560399896c956103da282df5bbdd7dfd0819e331613efabdc636b67 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rudi-kue87-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9d0fb7dab21c5c1cb5354a59e35c2b125738fe318dfa05f64c003f92a8464e4f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rina-bika99-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3dd70e6b31efdd1546ee68f3616e7a1cd51a4db2346c9fb13633186b12ed67dc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...