MAL-2025-138891 Malicious code in neat-yellow-flyingfish (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3807bdd8380fb48d62349f23f2a80eb31b662a12184b52c0503a76b0c3e1ef4c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mutual-black-roundworm (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 12317131eeefab57a8a0ef18143ae04c2c9866ff86e5d5ceca767ab54a9015cc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in utomo-tahu71-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 08f1fb5d8e9b77a675340d111397311164a9b9711a2cc81f42661381bb6ef598 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in gita-lutis61-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 771d00d9af6d45420035e68dd3dad8bbb86221dc8d9b5098a22263525b1cc02b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ade-ubi12-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9fd43496006743d704cbe54973fdfd8efe1e15feea67398514ba6dbb7cd8a1c7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ogi-semur17-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3ad2a48062e137f2bae62fb8b79f905b938e3927b2afe0ebb865a3926920236a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in wati-lutis38-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3145c0e53260215c038844b28018423ba2cf5e89cfba5c788e99a448a6b8ac6b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in arif-miebogor43-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f70b9ac2652664aabc8769866a2e866a2de6a8970f298c418759d53e261a9f84 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in zaki-toge45-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6dd6ebfaf9280da82e831ec5c6cc13872bd77f8060a718c3bf65b379675d3fca This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-135627 Malicious code in mulyono-martabak39-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4cf9725b279da9c51b628c3a95d52c2ee659c08a9ee37ed59fa6b7b9cd0f2d0d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-132412 Malicious code in chubby_elk_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0471dc9eb311abb1ea4cfc9970d3aa7a01a1be10683f66ac4e44553dacd791df This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-138130 Malicious code in xaver-mangut35-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a5a49bfc9f790f49280c380ad32e1789fbebc4b019077d111887848cb1ec0e8a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-136209 Malicious code in patria-mieaceh83-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0af5e50fdcf1254a3dfd392f68a241a3609f47bea0468d7c2319c1cccaafc325 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in gita-kacang52-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6e41cfdf3edb638a8c8e92984da0578d43b9669836e7cafc6eb5148ca76f6e79 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nina-empal27-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9b2bf7445b4adc7b622f13c404d3391e2396f7583c63e9324fa13c952a21de9d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tricky_leopard_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c4eb6a0d2d38436df5e54df65879645ae26cf5ad913981536c86b8fd5538b253 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in erwin-jengkol26-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b03d3208bfd1a3a6c8bca0b4e508aa7eecdec8423cbe2d1eba5f740d79eeb188 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lisa-mangut83-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 363ccb34e207af1d5362f4cf01c98f5c8fb475fcf64d4d5b306660afc303ac58 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cici-bakwan94-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector eb506907cb3ee8c12424fc7a0a3b1fd2c60d84b9a2fa938fd8b57cb7e8fa011a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in citra-taiwan96-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9780ede43ffbff4e53b160001982d83911a52451d3c7b6ed6a00f54b3c56417c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...