MAL-2025-71083 Malicious code in territorial-aquamarine-carp (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 184c9180136a44bfed529cd164c5f7c3ce41c7d124597b01a2f962393331152d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70993 Malicious code in surprising-orange-cougar (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dc84769220d1ae0d2715861f7e7261482ca2e088c1949697891fdc3cf4518620 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68969 Malicious code in international-silver-turkey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fd92b399824949e720cb1655d6867d711999b0596f4ec133b7d194568b7c5d79 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67713 Malicious code in democratic-yellow-tortoise (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9c005a5943e6ff1eadccad65fcdf5aa480d1aa4af5d48890a19f3221f6649f9a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in laila-keripik74-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a36f32c6496b2b74458cb3f640eb8d0741a03287e581cf63e2d2ab80075eb46f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in umi-rangi91-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5ca9de0820d0713749d1bb67d0f970f67f14696a2973fd230f44e74fd7842601 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in gita-papeda81-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5dd1c0b03e5fdef26784d8b5ad803dc21b250fac30fdb32529fcade4c468c866 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dian-bakwan67-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 982ff40cf57b2488a60a9697f6d8cb12d6fbe9923d2e734f0354073f56e68808 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dian-empal31-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4939ae41bfb5fa13b55e67ecdd3c838c21270cec9be3c6da10ee4ac0fe852640 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in difficult_swallow_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1ed23ee92fce943f88bcab602db649ba9db34884a420a590a18694e85fc706a1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in joko-brengkes30-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 68295e345c30685532bcaffd7ca829d620e37b026410c7868fcf6b9b36db9352 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rina-mangut65-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 38370a398a97bd76ecc21a09ae12a81eea0a8c3e386839cb757c85e0773fa0ed This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sinta-mieaceh4-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 42468aea13c60dcfe15468cb3d464fa2dc77fcb9cb1e6407b190ef4d2e9178b9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in agus-mieayam92-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 33bddc99b91cf26ae253750f50cc1837875dd3317e89b564c72704bc308e0d97 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in common_kangaroo_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5a4cc7cd67cbfb24ab45ecedf6f7f44278d7f77a6134a2635d0108f6ba3f72f6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ocha-martabak69-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 409e3a857153b476c24e48cb3edc82f2a637c4e6c87f4ec599c1e05a2fe2c687 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in wibowo-jengkol100-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 34adab93353eaf84d203eaf6d3bb0be01c505a6d20850313cc2b819d275302ee This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in bella-sate54-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5a1f626d6dbe09e982754f94552803282ae3b1e327f47b513844be6ae971a410 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-63826 Malicious code in kiki-sego51-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dba2e337197c1ad515d762d394ab3b747664b5c33aabec70bf542cb3e78ec41f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in yanti-toge11-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 79803ee32432a8c05c6c132bba4188810069307093094723aea66e437e82f037 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...