MAL-2025-187554 Malicious code in isostasy-rate-limiter-miranda-chalk (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8886bb1b3aa2881de5d3a090df3f702e15600943bd93f6e415c544b97c814926 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in avior-superagent-electron-meissa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fd9f9a3a3caa59049096a63d8e9f999c94003ff7ff78fdf91fc11d71097a025f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in okta-mangut52-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1c0dc959d0ac454804523e86a9eb85e8f9c6558ed4ce6c4f2eabb46d2adea650 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ocha-gembus45-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cd41775c86294d1075c01372d5b625efdc80edc6bcf5a332e829ee460a7c2461 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-54835 Malicious code in sinta-bakwan25-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 04c4ce466c5201669e114cba2ee47e9bc5a00e884ecab7e901662e741b4dcbe6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...