MAL-2025-138867 Malicious code in mechanical-amber-panther (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3f3b81d04b3eec8d7f7df1055c5e60213c983872f9d7c77f0b56a5b93294253a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-138985 Malicious code in romantic-silver-bobcat (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1510931cdd9bdcbb581abd2d21b6fb8cc8b9de1afdf7db21b5f8e2afaf979ad5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-138940 Malicious code in prepared-red-llama (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d1a7781454329c1c6b148e3d24e92ef63ac0a34da6bd11cae790b3057bd11cfa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-138891 Malicious code in neat-yellow-flyingfish (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3807bdd8380fb48d62349f23f2a80eb31b662a12184b52c0503a76b0c3e1ef4c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139060 Malicious code in systematic-chocolate-swift (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 83d66d84fcfe28342c35ca4880f8e8c2c99807acdc60f3b9342d7ce0478641d0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kurnia-brongkos86-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 10d521a6f7dffa4bee64d9b30b791ca08afa9fbbb0914179ecf9e154f87d3627 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in putri-rangginang3-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3ffa780ab83ee2ddca755c63fa4de8dd6949075d891f3630277260be1c1391d8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in gita-wajit28-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3a228065087b55a2a2a0f5ef4d1dd643916180e3203d74086de26f63a539e375 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in zul-sambel7-sumpek (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e7bd90f1337b4168063ffaaae2baa72a39197b348381d3a0165ead53781c3e60 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in vera-kripik87-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8a3312cf16510ebfe179e02bd95d9d7703e411f94f3f6ebc30aa5a478c01b836 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dull_bandicoot_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d27f4f024b4b32fb286be78b5b82c7166b5639b7135175fb19b9d7f49211cdea This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in thoughtful_guppy_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0838d802306e4f88b355ad87ffa17727623d7ee40d338ecb64175701e43e6a62 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in front_herring_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 765ca3c48dbf58152b560739836dd31f8d5d3d78ea51f0798e756fbb9e79d54b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in vera-asinan75-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 05dac6af62c60859048f1c8f351d524b6fb2c9e5ab5b1e5a8bf9f2cc9ac2f422 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hanafi-lodeh74-sumpek (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3ce50130e0d89dc11c45ab118a54f6147574be5a5aeb227d2b3f094fa69470ab This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rudi-gado-gado99-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector acf777b232a939a35018f0b0687f03ccbb1434fc682b6325986ccc45b9ca59d6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in yuni-bika12-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 10f74bdab881be7d235dc7c7a1906aef883c4232d1a19a3f5ab4e810fd8db767 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hadi-rangi55-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5100d2c6784900280e50d4bfcabe4728c37a6779baadcc37de5895ef341aebd1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in plain_urial_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0cc931289d927187a90164463efa14296b11e620d23ee1e2a076fdbded77fa7d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in yanti-sambel57-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 51793815411ba6d11b7f8f7a190c39f6bcdccb3409a4b887e56458e8f8a87379 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...