MAL-2025-160751 Malicious code in muda-poke18 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 18a6515b50b5aef9bdb71596a9413390450b094140fdda0d847bde321e129970 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in impossible_dove_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5df9cc3170a047f2ad091ee0c335bc36c49483ea9f40366e943ae3b172517c24 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-60238 Malicious code in deafening_jackal_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 38ad6dd24dc1bd310f1ff6159a3e35f8ce280db5f6f5436bde37824485e45283 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in eko-sambel95-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c29601ad2f2b8b3adbbafa0b1e582f2b9d798b75ed6e0b89662a87ded58de034 The package eko-sambel95-sukiwir was found to contain malicious code. This package appears to be part of the tea.xyz token reward campaign that flood...