MAL-2025-138982 Malicious code in rich-ivory-viper (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 962daf46b363032432dc2cb1157ec479478716cd4c2e0a266d362de454941a71 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-138917 Malicious code in orthodox-blue-mastodon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ecdd7fccdbeb5a8a860588776e90de4bc8e90a50771100a4fd66e0ab1999495d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in atomic-teal-deer (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5b52c3fee7dc7f21ae8816350aa42ba884fe9f87afb9571ee1e133ac48b9df96 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in curved-rose-limpet (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 624feaf1b0af54e728dc8e3b6c3c82b6954734b2d8718b93d9bacc8f5e0471f4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-138687 Malicious code in empirical-amaranth-scorpion (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector febc4a7bc10d0559433e5fd29c4590005a340266a4e1fc611c8b9d8488b0fe24 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in yelping_shark_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 969dbb6787df90f4b817a9f73eeeac6759b516537f461c5448161ae026c45cbf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in putri-wajit28-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2c7b6641041c3e2f448125dd1f41cab252d4eacd909a6673ba412ba8475fe71b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in semantic_magpie_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 19e584f175300f1a5bf335c3b9d217028502261882e375e1d5060a7e944e745b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dono-keraktelor33-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fa9447d70f11538421728ad2a42dd80ed4ba7f274740a7c60de74f971f2aec69 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in maman-taiwan79-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 31e37e8cb1a2d11564cb22cdb84710980f2e3afe8e95537dceb4a651bd5addcf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in typical_frog_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 974e05cb0b8f853657b34fc08cb6fa0a7175d7b633a65ef6a4bfb3e85d8565ea This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rudi-mieaceh53-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0e453b37f0f540731fbec7d7cbee2abc5f483e588ac06fa85b5c496256abe63e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in okta-menjes92-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 98d2d92c829caa739b95ccf565bfef6eb51751d5a724421310ac85f0fa1884a2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in putri-tongseng84-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 65b760afd4dbf75da61cf70a29227f1bc27925f679a5c1b9c0dfe6c94794a3d3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in gilang-tiwul36-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 19a67ade412168827b97433e58042bb2cc6bd39f61b98fd9e6693309161fa1d4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in putra-ubi13-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d4a3a5141fbf13c58afb0f6ffe1bcc46b19aec0288a5317034bf0255f975ae20 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in female_sole_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7a596f0d2e76bcc926ccb0c39348556a8d0bc154fd028c65130f3cd6b6c394e7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in joko-kupat65-sumpek (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 35936db8df1f1a10ba917130a5e125e4cca2666d408586eb345ad1be706dbb1c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in certain_hippopotamus_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5ecacb7642d584f4076b3af4923ebe4280cefd52db621832badd6d2dfde2ed99 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in massive_moth_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fc14cee5cae72985ac7566f23c84a71478e0f6e2c74700b1bd7b71e1ef09b309 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...