MAL-2025-138367 Malicious code in yuni-nasisayur21-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 42947ed64e80fca671bb09848c177f497ccecce140fdb25f7e4af3a95e5e6510 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kiki-sasag12-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 94afde217fc1f75ce7b9dad057e2a211b229c28014f91e870b71fe0d5f0e8e9b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in xaver-sasag42-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 72a511469c0422835af2ed4e01d9995f6225555882b2c569be7677482b144d61 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in outstanding_kingfisher_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 287019efdf7faec1ad2212d388951d2c63c90851fb0c5302bed2b2e88dd2325b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rudi-mieaceh84-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ce5f6c539a5adb4ae8b73bdf23f3cb6c0fe6fe11ded861e4b7ade3daac009876 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in eka-tiwul98-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e49a449b91452597d9a5262a1a451e716b07f0d954df0ff5a7fc317521035030 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in umi-sasag75-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1fd3d626e21cef045014701a8ca3a85d1cba6fe9332affeb3cb41f863c463bd7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in bambang-mie9-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ee5647fdbc2d03fbab45685fe88a152a21d33caf9a7bfa50ea01debecfa9ce34 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lucky_stingray_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b01ead9196867a060bc8d4df63ee1b510ce7dbe9bc2527169a35d62bf15fcc81 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in unnecessary_guineafowl_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f7348a3a7f4476dd9c52f6cc88041a0c91b00de3d3f13850f74e456e2a06ddad This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in utomo-klanting56-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7442befe675cb20cac243c183fb3323bc0698783debe0597c2720b67473493ca This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lutfi-miemee34-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 70d4e2d4fb94b119777fb72431db6f15b9980da373eb523324e1483b375c3bbe This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in bella-asinan100-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e49c15dc564aa3452be5c1bf520231e359fd91b54318ba02ead489997936e0b7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in citra-brengkes19-sumpek (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dbb522714dbe543b15872b2de3d6cb4cd2c98cf3a5637b23fc1a344dbcb98ec0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in marked_albatross_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6cadf1aca38fd22697d48c72752123f03965c1c64eca7668b2c615eebb12a98d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kresna-jengkol23-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8df4c69f87a95f878ef7d18375164d88e2fca6ba050eaf02c3f549f2cef0cfa6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in xeric_cuckoo_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b801ff8405e5656f761687a5b05e07b8d706bc98f961c1d8bee926a52df3e790 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nadia-bubursumsum79-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 96fc61ef9447edcd2cf3c544c892f14185c294c461c5274ef446e7c9f4141d81 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in umi-kentang47-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 73ffd8dbbeb819d0bfc84d67f4e68b9e0d3bbababa5e894e4a422789d925cb1c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in patria-oblok39-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6fa9a9bf912095b7a5f458e8d73e3d84f439458dd77143e44bf09ba828736308 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...