MAL-2025-141657 Malicious code in docusaurus-cosmiconfig-fomalhaut-firebase (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 48320ffdb95d1b543c27168dccd5a5eb028beb17f1215e1de83ec2140b407d20 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144606 Malicious code in lyra-elara-mongodb-firebase (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 15c379c674d57bf6ddd4cc912a0a3a0399b8b2db79a58e7383a36469c02ffe92 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cooperative_pony_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 343a3e6ecba4f6e55b22e45b42e8654c5024ac2c7208ecdc003364affc101361 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-105663 Malicious code in mathews-soluble-pot (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1258ef103377d4db35ae6774748a5c8c1bfacc53017150a47da9d44c12646b77 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-85079 Malicious code in erick-gepuk43-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 26ce72983d6e44666aeca50bc7e861ba5721eb41f9069dfae6bb1a76f7c8ab0a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hadi-rawon82-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a08f50721e69d4a9ca308279bc2444ec57e65e37abb48efcda22cff9c4558270 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in oktafian-enting51-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 127dd37b5423acba09a4c9ccb2343696fdd6fba0ee859c2fc83c6c3a031db2eb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in riana-naget63-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 25c5de65a9373069bc50f70e40d6e49da65b4a945a5abebc2bfdf4c668ce4743 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...