MAL-2025-68421 Malicious code in free-yellow-sturgeon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector af9b1c69c03009528cda8e5e561ec0f9fd04f27952e2d2d24037d4f0b1832320 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in abstract_pelican_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 78d9aceff8c9905d14ffdcd30cb2e157c4821e534c239e7af1d2d17f0ca59795 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ade-kue57-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d39c21517fb48aec3bc48b716582e6fa25c76c9966c4ef06c8fd89a1fd3f037c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in appalling_amphibian_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 253d43d5c399608e36f31fecd9c3ef9f39963215fe7df2ab71919ebb759e279b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in arif-ongol-ongol90-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8036700b79b37cbcc7c2fe0347967239722fbf841709d32a34d0bfb744e825a8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in arif-sasag1-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8d2e0de650c19857ab661e27418ddbc543d64691f7ca1e60c8abdc7e6943d109 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in attractive_hookworm_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8e3cc530f7c441a5d498409273281840a4abed8e17f03aa4c0503820a9fda8cf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in bambang-jamblang27-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ade29bcd3a1d0ad9e4000a0f9529ee1e8b63f7d46b40b0033e48cf8ef718e08a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in bayu-kue4-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a39f8c192e5719a64bcb6fd72452e08f204882215da32d066676b1c3d2f54e4d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in bella-dodol34-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1f880b0a6cba7134d5c2cd4af8636f455fa813418412be9a4f8d887bf0421df8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in bella-kemplang89-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 00069d9a9287d9393133c21f1d8b895146c838f8b59980b4072829e643fa58c1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in bored_mammal_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 262ad5b7cf7b236624d36a9a9b32a9d48d797fe4485244d1cb1aec7207472620 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in bright_slug_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 764652849b1d7a9935e49a51c1abd86631b6a1e69e5226134774749b4da6bbaa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in candra-menjes36-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2944ccaf286043ca3fa977402df41093c41ed4024d20f24e937a8dac67074380 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in charming_limpet_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 96dede2c7c303a69707ae2592a13c3a828f3964affdddaadcc23982936a069ee This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cindy-sambel93-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5824719ae09b82d3a54a41a58c66d28a1778be7bf002eb404bd5a1a413f10d93 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in common_donkey_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 112a9ba4c68379b3a73a9d513c30a42533b7be3d6c84e2a3e7c929d0e3b71580 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in confidential_fowl_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6f9193793e72994639f8f98b3886a12e435672c0fc14edf3e919422ee8c984d2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dewi-mieayam23-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c17b2778ced749e60c98ff7d014fcc630ef6315144b62b705c7b55a39378b6fe This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dian-lapis19-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1b8259888b42d231675b742d9ea3c08bbe150cc0dd28bc80497aae294a75091c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...