MAL-2025-188927 Malicious code in proxy-meta-pi-theta-bad (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3d262f7cb74cbc02a73246c1079e373c3cf5e367f400f9dcfb0c987786b01dc3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lookingan-jaja99 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 780713f6f7ef163b59d55ab35bc6c83c5701e99c38c0ea99f7648baf1c793263 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150294 Malicious code in @mipta1/tyuaa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cf606ea7b95ddbc85b59e471a0aa616c09338486f971ba7bce122d5f6659ea0c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-164987 Malicious code in rival-poke108 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 943d5556fef7d03d3e965ea5faa0b4dc625c790bc89752b62240fbc0a90023e7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in yonder-venus-buffer-hermes (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 51d3401fcbb13614cb43cc714a5d514e36caa6fe0cc27b35299a6f00a89cc8b8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-136347 Malicious code in putra-taiwan69-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e4b5574caf8ab689731fc0fc38c0c063f0e44d000950dd6702b0a9d7b7562c34 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-75521 Malicious code in surya-kepok60-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector eba3d65962adba4e593c3d15acf168c66a8ce3518367f56d28329baee0b2222d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...