MAL-2025-158783 Malicious code in lookingan-namala69 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 48121a92bca23952347604e76623568efd9ba3c104b44be52184aaf5c35f566e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in markdown-pdf-child-process-chakra-ui-winston (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e96d8d36d4e510dc49ae47e9de40c6c5fa597a27cd1aced5c26512e73abc5321 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-132795 Malicious code in dewi-tek23-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0d9f20e172e1c1c97f1b4b645c6c38af4cb4b5b3a75cb8d754cf6145c2503184 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-130956 Malicious code in various_parakeet_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 95602b557bfa432f16898153e9bdb879cb4b3dce7fa2b123703decfefdc6bdcc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-106567 Malicious code in ogi-gepuk35-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 95ea44489197fdde80176a613908c08d44b31f1311b54219861f9c918b43d20e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kurniawan-martabak65-pore (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f9d5ff30095ae47e395345cc919235e9506080d031774962e49d0b5b999bf6b5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in middle_mink_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 821f5db2e9122d69fb86eee5453078d719dc27a76c83e3fa2b3b2a914ccaccd4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fajar-keraktelor52-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector be0f8396888490501b8505ffc11870369be6bad6a9955546c4b78fa91dc7bec0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...