MAL-2025-66587 Malicious code in abstract-black-tarantula (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3476ed856e550997e83958ce62d48f1ad159294a349c30473a2deb117168d114 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-66812 Malicious code in apparent-salmon-vole (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1c8c208690ce22f7cf92267112eee5bf1b40d0bb0c5617939a887aa078091a69 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hanafi-oblok84-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6b50c32b65989bab216dd6fa8a55f571bead920d46d4c5fdb1918bebbe739082 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in zul-brengkes23-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ce223e80cf87b90ab05b64c3f92b03d839e0da0a55b509f5c6b3a0c0c8e3915b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in putra-nasi16-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bc9a6c29825226384b69811609992bdaad6720e2ce9e4134716813e939b5f3e5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in maman-mangut51-sumpek (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8500d31387a65b528cb3f3a5900089d1beef79b8084b534376e249a6fb9f1677 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nadia-rangi66-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 702c3030cf24adfc7f4a6e214e1cae1307e6f0b3ea80ca30d075787cdac8e67c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in jaja-bubursumsum39-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 595c3a7970f8ffc9512a145d852653646264a4a70d0049b47c19f0b9815d2252 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mahesa-kue100-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector abac3c72bf03a4a59263f38f1534751cdc6df9068d71db00c84c218a7589d619 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in putri-mangut26-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector eba3c3abfc65c5b779ae744d29eb859ca00735f6a7044d916fa09eb2dc1626df This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kurnia-gandul76-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f59126bc23d5a9f7adb11fb629588efcb9939d350d990f7cad7902393535a0d6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rifqi-rendang73-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8db3f2e19b25a7c72fe495129812cef7451054af442722ddb97da00b4bd97878 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in bayu-botok88-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d7876f85fe6b9bafc9521f040cd83645c9f3f7383d29ccf626ac4402fa8e8fae This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nadia-naget6-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a314788d882237044c6e839d5b0bf5130fbec58b9d7e7252b64e30d55e4b326b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in eka-jengkol10-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 309ca787988b0b0c5a2d4bd87ea69a4d259719a012bb96d8d7f4c3e5149ec235 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in wawan-mangga74-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b425f658b206cd98d3adf2d3e76ac8c030d9af6f58e73c8ccd46792e6deae01b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in putri-kripik47-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9952420f1d8556e39a417e2963fb16e277ddccc45d73e1756d8d16deaf5d4f70 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in global_dingo_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dbf2e5f0df41e54148e10935397d2a9d387af444d0c769d3465b7dc50b909e47 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in surya-enting72-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ccc0ff1b13b4e1e1c229a1d2f0e5030ce5872e87e2f25125563c6a80c950d917 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in agus-getas37-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 41c427b0bd2614d37ec9cc5b17c1ea8091f0a680947ea5b08399922558dda063 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...