MAL-2025-69356 Malicious code in melodic-gold-vole (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0ead1f36f6e54ec7ea92506786df8899e9028cef25f59e83a39ea79b564d02fe This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67036 Malicious code in bottom-white-cardinal (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 86053435bad461d822944e119a6134dd7a3b29a7c8f7741ce9842e9eee650272 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nana-klipo92-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 37e2fd33ec011fefdd62cfaf35baf6dbec079e167955b79a59643383cabd36ff This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in abstract_pelican_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 78d9aceff8c9905d14ffdcd30cb2e157c4821e534c239e7af1d2d17f0ca59795 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lina-kue69-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector eb340c6c64e07fcef33cc2d0435ac9ba13c5a44f955185eea2aba88c6120256b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rina-tumis25-sumpek (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0e8c817a930f844eb4ea4a7bb7125d27d422646e67a80c1c36ae4c9472d841af This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in putri-pecel32-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a22f81980ffea1d50e5a9d614539761271b82de864f07000f267f0fa12a2b257 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in bella-dodol34-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1f880b0a6cba7134d5c2cd4af8636f455fa813418412be9a4f8d887bf0421df8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in spare_galliform_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2e7ec7ef912bcf1b6741bfdf044d04ced0b41ae6b9313fb99831bf3b3cf98666 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-66349 Malicious code in yelping_moth_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 40b28671fadec94089312d287c59e4a068edabedfc910d5060c74c36a2ec4a6f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-66010 Malicious code in vina-pecel37-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6fb9ebb8f508b6ca382251ca7e2c16369364efe1d3ed7eccada3c07ab5c58f54 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-63335 Malicious code in hanafi-ubi51-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9babf55a13fc1c8fb8e1ba402ed9450462b6809a07cf23456803539b8d72c67a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-63664 Malicious code in joko-brengkes24-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 180f45ecef284198dcd9362d998e5f6c79969b543edfab4285015669661a39c8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-63930 Malicious code in kurniawan-moci57-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 25fb2725e5b051a177db7f275bbcf71e2756e37c626a93b4191758913ce85d27 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in gita-ragi5-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 11a9790685bed7b50a6cf6b853404685a8c5a2fd9fba15169d41e67b15d8e1a3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sleepy_condor_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bc0f7f65597e83d7ab6cddd9d74088eac385dc36d1b098239be1118c3ba20f7f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in uptight_wombat_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6f72b8da6d3a24955ab036d6463321192a30adc16887e221eea4b635f5d9b968 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mahesa-kepok71-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 19d43364a013c388dc824c33c5d90736ec95905c1f9e4a959ae8e11b329a3273 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in umi-tempe11-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 159616f86d8482dca8678089b04aa9f09860bc3db51a6a1ec9624e919af63de1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dono-gorengan26-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a7b19028d931474f9b7cc31cbdb8ea316600b8fe1efa2f271d4966a92fdd4c9e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...