MAL-2025-174444 Malicious code in goodain-nusafa-nsafi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aade912c227aeb1107b24adb6a4e6f214155c9461d40b1c382c97f8371243b78 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in chalk-ganymede-postgres-publish (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ba1009d64190f9c6b9bc8272ae2b4ae56996f71e14bda1fc7a4695aabf713ddd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-125762 Malicious code in dewi-empal72-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 093c50b5cad46bdd102e47252d9bd2743e4788ef27cfbf8ebfe7e96850655c01 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-126981 Malicious code in hadi-empal91-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 06e04cc183223cdafa75f5b8c04dfc03601e83a78fcb271f79bdb5b8a9d8304d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-90869 Malicious code in surya-nasisayur74-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e8b4375555c994fa87b843b85c048ab99d49d0a9c9730e92d7c946bdca036bf2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69996 Malicious code in pretty-white-bedbug (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 800e88e667decb065602486fbd0add04cd5a3484811188bc3320f379d925d6bb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...