MAL-2025-138742 Malicious code in functional-white-bonobo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d29b32251d09bc5913b38b0a03da06b8ea4cadc8c76f86e962b79718c5b3754d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139113 Malicious code in wily-emerald-chicken (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4754f219c7da76642d10ef504b268b8b5566f8f0ee7e31d89cd98be4c53a9998 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-138713 Malicious code in fandyx (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bdade6e1ec652b9a046ed605ec3923b085c5589fd453f79db40f49ff218e3192 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-138646 Malicious code in damaged-salmon-angelfish (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1e57daa4a91a59fab1e0c4ecf22166834d63f9558ac43438608aece819a60183 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-138772 Malicious code in heroisme (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6b6e16d141e590aaba3c9f7f6e4903a270e1f51fa0b246cffd19585209ea0962 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lutfi-getas2-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5b1f4600ce2a41e015d292a2996adc79b3bd8b4200d6933a9be94226f4180932 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in vida-keripik75-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 25e23da93cd7a2982826f2c4ff40966c59f7745cf503af2f36696634b0e85ac9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in gita-saguer64-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 539eedb3d2dd896b14b9629b139ebcd13773a0d6b1575398dcd10897fdb4427a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in yanti-kupang23-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5a4977ec82a246832d5b1d00ab0df65606af17af12169bf4dfba067b360f268e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in joko-nasicampur40-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 381650fd78aa240cdce677f88a5be35f39fa23d4e051623798c737c9eae6d0be This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in qori-semur26-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0a051463a18aac9ff4ae519b88e888a039b763497d47c033f12dc2d4b699c6b7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in diplomatic_cicada_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 765adeea53b6196c17524a1e60d8db664e6ff4df64e7d6ac9c77920de30074cf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dono-esdoger39-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e61c67a93821c17fb2206a21f45803e09779203785f5d237158e01fb9b318dda This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fajar-klentik43-sumpek (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aeeed80c4865e3a5d79b1c8b8d5cea1b363cc9d1e36631ed9c8fef5aefb35cec This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in qori-tumis97-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0bc3c96cca870361f2e522f3bec9db4ece2cd70b818c499816d89d3667f99529 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in wibowo-mieayam58-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8c1e50765b87701df7f584b40c79cce4d529da7d8941cb2db81c37b51d697b3d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nurul-kacang2-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a12c7dc9b9cad82627f39a6eb215b7a7a0b1b0831ffcf0b6f31e660ed3ca82e5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ida-lapis44-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5f3de9cef232b06fa4464be5338f59e57959b6e4305473907ec9251a1ee14464 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in galih-lapis100-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f1c93bf019f3de19d364e8f787a3b32a87722b1cd0a4d3ada9341f3cf0bbb53d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in vina-pecel7-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bc3e2e366353e704c7541f0a622b8b35d15ce06abffbb4914ec8380023ea9b94 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...