MAL-2025-69986 Malicious code in present-plum-kite (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8310bdcca0adb4fc4040db88c2109b3c294030599b7a9bf1e36f16c5d7cb825b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in eligible-bronze-quokka (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 387c6bbcec344d246523eb5045a18982753d70cfdf226e3968e099dd54f66383 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in impressive-amaranth-mackerel (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8a9293092e5301404d2f71af5e25b1ad94d9c20f605d37a63ad0070d98d0003f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71083 Malicious code in territorial-aquamarine-carp (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 184c9180136a44bfed529cd164c5f7c3ce41c7d124597b01a2f962393331152d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in agus-mieayam92-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 33bddc99b91cf26ae253750f50cc1837875dd3317e89b564c72704bc308e0d97 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in zaki-mieayam73-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f7c06073d844edc407a38a64298993e1ec0ca02068d005ed64a70025e3acf215 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dian-empal31-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4939ae41bfb5fa13b55e67ecdd3c838c21270cec9be3c6da10ee4ac0fe852640 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in gita-papeda81-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5dd1c0b03e5fdef26784d8b5ad803dc21b250fac30fdb32529fcade4c468c866 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in yanti-toge11-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 79803ee32432a8c05c6c132bba4188810069307093094723aea66e437e82f037 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in difficult_swallow_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1ed23ee92fce943f88bcab602db649ba9db34884a420a590a18694e85fc706a1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in umi-rangi91-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5ca9de0820d0713749d1bb67d0f970f67f14696a2973fd230f44e74fd7842601 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-64963 Malicious code in qori-gaplek31-sumpek (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b66fbf9b302ce936858868d9811d5019f999f738d7ef8895d20c0ca707310f45 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in common_kangaroo_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5a4cc7cd67cbfb24ab45ecedf6f7f44278d7f77a6134a2635d0108f6ba3f72f6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sinta-mieaceh4-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 42468aea13c60dcfe15468cb3d464fa2dc77fcb9cb1e6407b190ef4d2e9178b9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-63098 Malicious code in gilang-bakso50-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 044064cea32cae013e1acb30f6b04cd1023e39b9d0b7461eb8691502be51b9fa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in joko-brengkes30-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 68295e345c30685532bcaffd7ca829d620e37b026410c7868fcf6b9b36db9352 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ocha-martabak69-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 409e3a857153b476c24e48cb3edc82f2a637c4e6c87f4ec599c1e05a2fe2c687 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tiara-taiwan15-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 28c9a6e805888e63ec400015539fa80fee8e9de57e15fdea6628803f56c120e9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in citra-tahu55-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 99e9ae997515f0c069f444b6c26ae6a0d3f77ad1236a47c620ab43db5433da71 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-63462 Malicious code in indah-bakwan94-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9cd18666c6e562d215c7c1ba4e22f510989b4ad598ee9c8799d4dae2d73ea671 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...