MAL-2025-70055 Malicious code in prominent-indigo-mandrill (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f7b5e5977685307a6cb869299e581d8b6779cc969103e1f0a2dbc2e5adabf2a9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in oktafian-klanting75-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 12d5053ca4da8344f6f9d9bc673e8dfcdd0aee3a3e01ac312345badca11e83e3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lina-moci8-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2c281e14a7413d07f4ff68f5cbc94f950f2d62a12b3dd364f7beb396dbc3c596 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ocha-tomat73-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f5f11de6937985972eb95c7ec49747e57c05a9a9fc5ca924bbb24e76b418219f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rina-tumis25-sumpek (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0e8c817a930f844eb4ea4a7bb7125d27d422646e67a80c1c36ae4c9472d841af This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in abstract_pelican_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 78d9aceff8c9905d14ffdcd30cb2e157c4821e534c239e7af1d2d17f0ca59795 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sleepy_condor_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bc0f7f65597e83d7ab6cddd9d74088eac385dc36d1b098239be1118c3ba20f7f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ocha-sate19-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fa1f31bcda007ab9e0b8574647446c821d1275a32c55cd84e069611f9bcdcd1a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kurnia-ikan35-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 58c2b043a2b995c309f9fd5ca7183db9400fc66306a4a9e09cd49e3f228e550b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in zain-ruwet8-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b50b859a020030c48c429946d8b3b56bac0d2946b3692997bf2b06d3b36ffb14 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in putri-tomat56-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector db79e6f8968a494bb8d689970739a8032ea13de8f4d2bbfe328da1076b7fc581 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in uptight_wombat_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6f72b8da6d3a24955ab036d6463321192a30adc16887e221eea4b635f5d9b968 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rina-sate20-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1a741bb58a1d22dcaf82170072a7e92a3d815edcf72e153e68a1ef251ef52a83 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in eka-brongkos66-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4729f7ced964ffb287499ff89d076d85d832a2e2a853785b7249f025bcbf6cf9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lina-kue69-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector eb340c6c64e07fcef33cc2d0435ac9ba13c5a44f955185eea2aba88c6120256b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in putri-pecel32-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a22f81980ffea1d50e5a9d614539761271b82de864f07000f267f0fa12a2b257 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in honest_snake_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7c3e2dab92279d96523f7b855021a729d0cad8dbeb1fd5b23f1b37cb422babe9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in vida-mieayam6-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d6698d2f3b375902f811caaa6a5188fc6b26f3315b190e47b3d628fc750b6d68 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in bella-dodol34-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1f880b0a6cba7134d5c2cd4af8636f455fa813418412be9a4f8d887bf0421df8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in irma-sroto31-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 88272bd0bcd6f3f365440fcc468cebec6293422ba0809a5dcfac8b451725df39 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...