MAL-2025-144506 Malicious code in loglevel-cross-env-exec-update (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3e94b7d7cab06bdad4b51a0677f1d821f7d50928c6d6eda557a6e75f8ad54714 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in irma-pisang59-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c7e1d64bbc9baa8b093f43e815bc05851306a82c8fe4f9dca279a496ca948597 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-129361 Malicious code in persistent_mongoose_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b5c8b6c423ca1935d5ffaa60aaa9c487a01631a75cc18947a8d2318f362a6bb7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in bella-sambel69-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 01d5c69253442b992337dcba7c61464f3d569268a350854a263cc492f3081862 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-112714 Malicious code in arif-sambalado22-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6e1f2651723ee2f2cadfcfd18c4beda37fe8eaddb9a8dd5a3c6ee11617a70f3b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in candra-menjes94-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector af4148e5f97dd93d0819d5f4eabe36654c7db4605787bda37f89f60532a96311 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sari-kue47-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9497edc33e03fb2a16296f714dedeaa2388c39e34814566eafe9239d700132e6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...