MAL-2025-138668 Malicious code in drunk-tan-cicada (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 397dee4b2b12b0e455c33c3cb6ca1cc2839d7b72e2254b887dc77ce8d5a1622b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-138947 Malicious code in prospective-indigo-guanaco (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 615170e63c85a8c696264d65ce77a67dc95e4cc3fe9d79788c1bc5b8e65950d3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in painful-emerald-snipe (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fcd7ebdf01c168f7afc3ec5d5a1ba2a30e2d31f5b04aa30336521f00010f12eb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-138815 Malicious code in involved-amethyst-pigeon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fc184b63fe725240edae92c06b75e82b34d273e905edcb0272e0eb47c7ebd110 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-138601 Malicious code in brilliant-magenta-smelt (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 592164f2b0fcc3200956fa782a2a9a4ac824ccefe8eff9705aa4b2b85c52a4a9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139122 Malicious code in yappy-silver-warbler (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c3933638eeabf1e792992df13a3baa51c013cad85914ff892b6f37087e5065db This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in acceptable_peafowl_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0e28116b3a8c0c6c8b8e1b6b5ec1a07045c984eb5bce7a144bbd37e80b4bc13b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mulyono-klanting25-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9a8a23133e91150b2df24fadb883a5c9c25f4f97083c6e4a18037b3e7f50b41d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in eko-getuk93-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector da81de48babe6cec334fc0e98ac1bc0290a80e29ec8b0fcf2c520362cfa89d95 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rudi-tumis31-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 97c2c71965d4ed17094b9572b34a0169dffd6d3d1a01c199e9c662d11be7e2b1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hanafi-klanting77-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 75a535e0e3cff2f1797935213d1baea8904bd7347526c6e18003284302ed3806 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in qori-teh89-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bc2ca4396a239bdb271d07449240a8693c6024c3d5a71aa237c6eaf26416bb05 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in gita-moci56-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7478c77509215c90db4f2105e0e572c30370ece3dc0c009fa781c16c006a8d20 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in laila-rawon87-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 79eecf8dd9fb90d6cf45a967c99c29dfda2f52bda915d1ba5c480d9e331de8fe This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ogi-mangut11-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 11f7957f21627a9bf8ae7c91783a1da5115bc6ec198f2f17394efcf9b1ff5500 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tomi-rawon48-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 198f0c8c19f61c8ddb50d31186813ea3532464978a064bbc5f08f894e920681d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nurul-empal73-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b5d8995f15faaa3148be562b91a0742552e8b6c6fbad98cec3687d47ef40e72b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in agus-pisang22-sumpek (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a359eb9434f6595b8e011d52e3d01aac83f1714cca3ff8cbb2015c1d76977eeb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cindy-tapai100-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 20b6bc196d1247c78701565c629a395ef25a3e74a96474473d583f80fcd6aae9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cindy-kue52-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 37cfe777c7417a29e99fc8e3064ef1e3bbdb5ccb5ea678a30d121c94dfbead12 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...