MAL-2025-70428 Malicious code in royal-olive-limpet (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3c341bcdaaed3945acb51c1312b486e22ffa89bfd0169328df8631862d077bcb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71238 Malicious code in uncertain-turquoise-cockroach (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1869506b7dd4e94aabb4ee487f2edc20c7a89f3df5eb19d7a481db4401e39ca5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in vera-nasicampur57-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 33984fc8bbcef0367c21882e7c197f4af0e5e9b43dcb8ea4f5968dbabf3d3ef4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ida-tek63-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f22e7280574caaec1dc99981cb7b8d9f26a4c391e8927d98487c6d447c2058b7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in eko-lapis74-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1e77b33dfa91d6a35fecdcc855f715e3f9fca7f91bb4aa4bd5be5aabf13b5ac0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in selfish_silkworm_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 03cc1ba2c7a55da39ce6abdb7f7ca8f3538beec5a2d8d43c5c4b437f79fddbfa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sari-rawon12-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5a6e82c9f837c9f3ca86e6ffde99fdf67ec25e1efbd8f4f87e4dc9006fefadc4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lisa-ubi56-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f131efa5f45ca5550f79e12aa7b8ff2c126dbc06b86c8198af7a9349797def89 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in erick-mieayam43-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4c8dc484b1f12b0a8bdb2ac4b10e224527163b20497715bac6ea224f5ee691b2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in udin-bubur83-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c4763af1f3f5b10978b4fefb3d86045110a503dbf08071aab2e175d6336ca452 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in protective_raccoon_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2ae62f138bb69b31b2fa5eeb68f45d80954f45efe14c315ed769ab86bcedf927 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in yanti-sasag87-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 37b15c5c40f3f1c4e2790c4fbddf5184f734f612ecf2da3efbec772b47f7d45c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in gilang-lapis34-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f3aaf29a6eb3d58084b5920b0b982dd2a2024b852ff8ed6b1a8eca99a0703bb6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-64305 Malicious code in maya-sate8-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3966865876be92b4853ec3993c3a31c390841c6ccf729e58df40efc39da4ef21 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-62596 Malicious code in dono-keraktelor19-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4c50112ed3b2d16fba075caedb25a0f2070d786f12e3701d03ea4acea1a73b28 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-62619 Malicious code in dono-sambel7-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f95bdf2b336f42f4011fa9fbf1a6527f6b80b4377e1b11bf5977caf38b934f2e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in vina-gandul51-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fa71e7d13c64be8c59732c5dd04fd763a91235891886729c42feaa8e9bbba83c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tiara-lutis52-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 44f49564e7aa41dd4556e051f56c01ded56147c599e53e542a31154fe9dd0476 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in joko-brengkes30-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 68295e345c30685532bcaffd7ca829d620e37b026410c7868fcf6b9b36db9352 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cici-ragi38-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector de8e8f6f075253d728e1afd6131e34d3e0c7f876d42369bfbf92cebd4524a20d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...