MAL-2025-138765 Malicious code in grubby-cyan-prawn (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bd90f43efa9b93528bde9f8764b2c67fd75a8ecdfdbe3719c9480b3df9cbfec4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-138660 Malicious code in disabled-apricot-dragon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1d2d62bed01605d4bb7bd7be840d37c28461a0fc640c533e0eb74c2f333eddaf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in new-azure-grouse (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6da81101753f640bb6bb99ef7b9b99d6b8cff26989321016e680c4664214d631 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-138687 Malicious code in empirical-amaranth-scorpion (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector febc4a7bc10d0559433e5fd29c4590005a340266a4e1fc611c8b9d8488b0fe24 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139082 Malicious code in tory-maroon-bandicoot (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4cf1118128f7f95fa195586236283c5692f80b158e4907847a39edbd7299f77d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-138654 Malicious code in determined-aqua-mackerel (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1ca03b9210b3d527b64732cc5c80ddd8d0f13b5f3bb8f8687b6f7564273bdcf7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-138769 Malicious code in hard-emerald-cardinal (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e5e44d60c14c51c84d88f48ff15851f928b0fbbc195366643a4d8c0be03783fb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tania-martabak6-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8248f408419c6751621e16899c8eb4afa12039057ee8265879747098a1e72659 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in wibowo-mieaceh40-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d46da3abce478a74d9274e6a8757c43d662fd4fc69d6422cb516e24965f9e616 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in gilang-rendang52-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 34ecbef3c072724da6709b58b740ec5ce5ff82fc090f8fa12b5bbdbcbb9ee75e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lina-bubursumsum54-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a6c4dddcc0d0c93eb0e1e3e0be7b5bb17cce2b7c8e249e0f31287064c78bafa5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nadia-mangut79-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4935b0b38bc78c2d520c0e1c9f343c0dea2740786b7a2338a21f737a4c3c04ca This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in erick-mangga77-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a2e9847fb74f19137f7964916f82477b1d2c66b4f41b37019123eb4cb0657e84 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sari-enting81-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bee32ca13836c2ace9045b69808979d9b3f594d4c7b3f2926d171c5dc46d0957 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lutfi-botok16-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9a378b0fefe0e89068b4ca7ec973f1203bab820347e89ecc2e2669f3ad40e8c4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tomi-tahu5-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cd577d9fd2d1abc398a9f59f8201fd241c35d068cd43557f112eb2701b0a1af3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nina-mieaceh93-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e89e4991e1e46b9667b9fb511a63eaf666f75ad336409afcd36e130537e4cfc8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tiara-nasipecel87-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c45fa0a97ae248eeda72b6c688b93a734b94e45d5fe5b345af637b13f53928b2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hadianto-bubursumsum63-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 15533b1e924a939ed90c071fc9359536b686baa216cdbf6f884e7434c1033a25 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in joni-mieayam98-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 510ce2bf2128049c47f248ccf3a5218e6e5c28caac2bff679acfd325e0f5cd77 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...