MAL-2025-139011 Malicious code in sleepy-coral-gecko (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9b6aa97bd2e151bacb79b96414ee5f8a710a91208bc49c16b8e842ea40b7a2e5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-138891 Malicious code in neat-yellow-flyingfish (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3807bdd8380fb48d62349f23f2a80eb31b662a12184b52c0503a76b0c3e1ef4c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in musical-ivory-condor (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4b5b7bbab3582f3c1fb0a049f6a9a421973428cfb0a7169e201057bda504bad5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-138985 Malicious code in romantic-silver-bobcat (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1510931cdd9bdcbb581abd2d21b6fb8cc8b9de1afdf7db21b5f8e2afaf979ad5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-138940 Malicious code in prepared-red-llama (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d1a7781454329c1c6b148e3d24e92ef63ac0a34da6bd11cae790b3057bd11cfa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hanafi-lodeh74-sumpek (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3ce50130e0d89dc11c45ab118a54f6147574be5a5aeb227d2b3f094fa69470ab This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in wibowo-rangi95-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 81daa594b884735a6e66e93a7619384bca1b7bba5cf87c77a25f9f14360b0bf0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in jaja-ikan91-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ab027e617858ec3f73492f892645589c040440be27e2d8cd205bf8637dfc699e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in curly_llama_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5ec39aa44f95fafe0248a732f5b8b290c808329224bdf9ebddd4e724cfd4fbdb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lisa-enting81-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector afb5bb04198280fa2e5fead86a6311b6525c2c000cc098c7342cd9360b911dc9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in gita-ketoprak15-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 31b0b0fc04bfcc3a0e2eadce515b71be200f8f61b167dfe89aa888df17c6fd69 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rudi-gado-gado99-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector acf777b232a939a35018f0b0687f03ccbb1434fc682b6325986ccc45b9ca59d6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in yuni-rangginang38-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector efadc0f9e70d332d87854dc23da5509a10dd6313af3180fc30d296dbd630cd7e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in wawan-kue8-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 17a8fedefc804c6bba2d24d5ee3226246ceea1c49a6f02a9f0e9d4a2925e5493 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in yuni-bika12-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 10f74bdab881be7d235dc7c7a1906aef883c4232d1a19a3f5ab4e810fd8db767 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hadi-rangi55-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5100d2c6784900280e50d4bfcabe4728c37a6779baadcc37de5895ef341aebd1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dull_bandicoot_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d27f4f024b4b32fb286be78b5b82c7166b5639b7135175fb19b9d7f49211cdea This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-135420 Malicious code in maman-empal60-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7792d5b297d2ef7f9f9c7c18eafc317d66cad27ea8b07a74cb8800adafc5767a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-137507 Malicious code in udin-tiwul86-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 47c636f37b0e2ed12f3460a4d4f9155bbc26dc4df3e5356c163edde60b01aeb5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-138524 Malicious code in zul-empal32-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ec798f2a790d1c3b0d028b9981956218ef01d73ae2674c708eb74afc86e5b7ea This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...