Malicious code in fragile-bronze-guanaco (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aefb58c3e80a26666679d6185704ce2125ea199ad4d24a56a4a6aef870c4f127 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71010 Malicious code in sweet-amber-tick (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a083301a7d4e1e987d4d78a77ac69cebd9883ff43b3b2d5f79bf8d24ab36a56f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fadhil-keraktelor24-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 994c831c7129ea945cb0b91373b3d577f89256ef578db1aa0750aab84383525d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sleepy_condor_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bc0f7f65597e83d7ab6cddd9d74088eac385dc36d1b098239be1118c3ba20f7f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kresna-gudeg90-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b0a62ee21938e2e3b1e8379ff79a39ee2e94dd447091848b50b1219cdddaf5e0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in wati-tempe7-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 911c61f57dd55cc3a8467ee5c5cf50e2654220caf66325ddb9abdd68aa10397c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-58862

Malicious code in joni-taiwan68-sluey npm...

Malicious code in original_wombat_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5db7e1d27f43513e2f4acc039ce460b9cf9fc31833d822e966913bce2fb91634 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in qori-brengkes24-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 30f5c47617345c4364a26d5ba105327dc6b42175d8ff631412005a1aaccb4710 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in adequate_grasshopper_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cc6641c3113af48a7c84bf316880d2c8300c6a11f42b0dff0a4788be2e11813f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in riana-sroto41-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9b0022a971d312d41d065b0886dfc84f51bf9c630081f320d613c27525e42f74 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cici-kacang7-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1c6bea9a83f503d1999e6f4f227d9d8f7bc5d48d517b75570302efc76ecbd685 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in putri-sate43-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5c68f9f42e4f31668a71cbb31ea4fb8f0533b72ea0821ff11f01dc81bade6f31 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-59013

Malicious code in jaja-kembang92-sluey npm...

Malicious code in bella-ongol-ongol8-sumpek (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 80ab39862c36ef3fa3cd7b317935c895936fbdf6074b3708a6cce318c2f62fcd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in bella-dodol19-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9c701fd5b5b33f39da8d59cc29e60b980f0e6cb84430a94f419cbb6645ec1a53 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in bambang-klanting61-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cb5f060f8d143a089cd59dad75114c8b52b2428c16379b5eace1a3763f9cb9ef This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in citra-pisang97-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 781667d38735b1e5925bec1e3fa151ec023a363cc243b223246eebf94d8d836e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in budi-kue28-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 95e60cc1f6f2d494f7beed98db7f40a03062a4384a012e37372b73f44a8aa25f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in oktafian-lapis78-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7a1a99d53bd29034cabe5326e975ab0a53aa268ba664a38d9b659dfe16c23608 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...