MAL-2025-73454 Malicious code in ida-sasag37-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e805dd5022598697a5262f5143d38260aa92e0b98b4df0ce7340daea2e59267d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71281 Malicious code in unfortunate-lime-junglefowl (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1e2f295d39e2e2caf5747d61b6a9b95c88d1ef7c0d66bd1a173d25f4c314ff9d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in marvellous-blue-butterfly (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector da0689dfbf8f9fab7e7d3efda817e3ab3c6e899b9630bfc64e57b39318404c06 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-64704 Malicious code in oktafian-getas38-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6d8ccf46771e3a0eed0e2a1e723f557c141426850924e9429d70e083bf4a36b7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in terrible_cicada_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1846ce3391f95b2b4f768985d774d1ab5995b57f6b58e99d32f1ca1cd9812867 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in oktafian-mieayam41-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9123562497f15204d9483ae778abbcc5960405f06ed61373cb9fc430cdf82d0a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-51232 Malicious code in candra-rangginang93-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 42a4472fa6abc2f8837b4f8604b93bff04484e146fc196c9c715f1eb154469ce The package candra-rangginang93-sluey was found to contain malicious code. This package appears to be part of the tea.xyz token reward campaign that...