MAL-2025-138982 Malicious code in rich-ivory-viper (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 962daf46b363032432dc2cb1157ec479478716cd4c2e0a266d362de454941a71 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139095 Malicious code in varying-maroon-blackbird (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d532c4c516056ae0f4823fd186aa9df55ecff4f2fedd5d46ae96af890e43699e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-138687 Malicious code in empirical-amaranth-scorpion (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector febc4a7bc10d0559433e5fd29c4590005a340266a4e1fc611c8b9d8488b0fe24 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-138661 Malicious code in distant-fuchsia-toad (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a26d98847cb88065c9bd3145efb5221682bc8ce7e0457d51df25c26bc7920d5f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-138917 Malicious code in orthodox-blue-mastodon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ecdd7fccdbeb5a8a860588776e90de4bc8e90a50771100a4fd66e0ab1999495d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in xaver-sambel55-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7e730beb61ac084e6c2904ef88d9bee93860561d2a032238a1dc658a5d78e889 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in primitive_lemur_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b9cbe94a8a555f1242cb985ab6cd19921ede8a805409e614fb47a8f8ed52f5b7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in indah-lutis25-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fd287dc06e3388090e35e5829937d4a9db4d5491321ddc33c18c98d9f3eae4fa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in oktafian-rendang46-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a05317990a21e01fdfd940dfa1727e565912895d7fb71f49e86402b4844ebcc5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in zul-sambel7-sumpek (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e7bd90f1337b4168063ffaaae2baa72a39197b348381d3a0165ead53781c3e60 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lutfi-sambalado82-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f88704779b82a5fd0943f56457fc424f6f8f176ecf956e84622aa285947c4828 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fauzi-brongkos15-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0c8ac84f9659b1355259d1304494bd9a5b5d42acc1af0348a308dbf3e4a0953a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in wati-botok85-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d2f3ffb75c5f7ee573c505587cfa7e4c5ff1d274d8d8b25693406bac53132d93 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in okta-rawon100-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0528e5bb7c42526ef7842ece28f4316729ea3aa65f263199202dfc38556fc545 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in candra-kembang91-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0688f6145e867308c2d3e6884e6e46f6483b1b1ec1851bae1cb2bf6aa431a3f1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in vera-buburayam75-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 075147793c2ab0167d0d7baf8505520f18ffe852f2854b46ad033b462630b11b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in yanti-gorengan75-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 068bbb5fd87e4b3226c90dfe014dc92eb339da930c5ae24d463e966312081dae This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in riana-klipo20-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector eef61ce1cab28df33e473f6dc1540a27676c54d7f639114aa051e5462311e36d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in jaja-tempe84-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d21c88f5a91c91c252be870a034fef6b68eb398974749c943cf7921155fd0a42 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mahesa-lepet67-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 419593210bf3bedb69d019d7c55346e7c5a7f858ceea927f3086f1f533441f8b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...