MAL-2025-189038 Malicious code in quasarjet-umbriel-global-rest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5107d252300ac72e77d3226682a2382d559b0e1b387c3fc03169b328d0195ca0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in inal-poke112 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4089352e58aae7f0cdd2a9118066f499d797744ad90a1f0e5206f79003b2e380 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-134279 Malicious code in indah-bika8-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c4b4aeed8dfde167f485cd1eb4a7e7d62146497a9108e7639450fa80e616a990 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-100914 Malicious code in content_cephalopod-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a4e60abf3d710f07fecfa4062beb31443935dc956fd2aab8412126defde8795a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-99402 Malicious code in amused_armadillo_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 17b94fc64ca358712a1833f10a360a838b1e2324dc8465964609c81411d802f3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-81839 Malicious code in udin-moci29-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b023fc507909e31307527d1d272f07ac6f48a660667c75419db1c8f60d898c52 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68202 Malicious code in extreme-sapphire-zebra (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2d05cb2e6c1949cf65fc509b0111cc0ef466de840938798d07c4ba83bf633183 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...