MAL-2025-71597 Malicious code in willowy-tomato-mink (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f0bb06bb54e19101d21d06f89b5b4e447484f3a74c39ef7c11ce6033ca1caaf2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in agreeable-indigo-cheetah (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 497d95ace813b16051e585e41a797e5808c519113a5e0760a224ea2fcb49287e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in modest_swallow_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 375f955bf81fde4770e1724fd9e36f3ca8eeb09b7a409e2e9fa8bc52dfb5274c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in agus-lumpur9-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5dabf9d46a3810dbbd01877d4b1a867dda29735f6a7f9d9dd56d6cf94f54b6fd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in siska-nasipecel57-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3c380c8471c6fd1cf51f0b5a82a50de1bebd164c61ff8fe0386bef0f6b92edfb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ida-mangut22-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 55f8c7c81ad9b675005974012d510c3887b9b55ce059171cb36263b68b6d3d15 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in eka-lontong96-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 36d172bb57ed5bd02a843978a2a921a1bffc17b182aa895fb6b904dabd02cae7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in vital_swift_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dae5dc1e6a016bf5bedaf78bcef1efd55e04879d688c0317b0275b13688e6e0f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in yanti-liwet63-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5f5ef4a038c85440561157f121436efce8ee7d3e7dc62aad23ef58040a701007 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-65846 Malicious code in utomo-papeda6-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8338fc8b8490abc1d68477a8166b557b9ea4a60a9a128c2e861c41f58819b34d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-66125 Malicious code in wawan-tempe7-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6c55658b733c5be39aeaf3318c939ccfcdb4d318f88bf68e61b0a82f41945f9d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-64465 Malicious code in nana-sambalado41-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3912f512492a6f696b9f542d786bcf18821d5b4a46943ca279b61b8850a6f026 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-62900 Malicious code in faint_anaconda_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a86eddb69314c5c2708315216d44c176e79600bf5517e83ccac8f04c7e91f3e8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tomi-serimuka30-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 17daecaa898a0003b8d51226d5cda3400e010427316e5665676deb3219a0d795 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-64484 Malicious code in nina-brongkos10-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cc256cb253e62f1df72d4697acce04d0f58ab25a12926b61d3331096d2e88ed5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tania-kue70-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c185b96b19d7cd39d6dfbcd1969739773b602e0e20a7243f2845f352e5b87d84 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dewi-tempe23-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b170ef1131a2b49da3e998a5b5b5009caf8b9755692f64212a265c9f5f4c5d9b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in qori-sate60-sumpek (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9c81f0b0f26d4215de1823c2e6083bd0ddbbdc33fea6f6b74c57a3f5b6005f03 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-63241 Malicious code in hadi-nasisayur82-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bbb37b28ddeb065fb1450f578c92c815b8f958e019663fbacf2c282efbb64385 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in maximum_stoat_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6072d876662e343dfd969818a2141aa194f6de4adf4dec2c9fe24e22c40b048a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...