MAL-2025-53029 Malicious code in joko-semur14-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d74ef200d25a792259292e3390c1f6ea364971573a234182fa1329badc0131bb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-52878 Malicious code in hanafi-pecel81-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 26da5ad4bd2e39c7172faf67d4de68bdde4cf082e0925b5c4f67f42d9654ef83 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-52876 Malicious code in hanafi-otak-otak36-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 040460af8029505cfb481736c53960f2cc531b93bab124449dbd704c5b012b5d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-53462 Malicious code in nana-kue48-wekto (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1a9867628d0c939b14f79c58732f6b5be493547db1a1a0404b2d763b26ef5ef1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in joni-sego65-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8b705c95b20028efb436e3ecd0b1eadaff4b36cd647d1c13e7288a5617202198 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-53396 Malicious code in mulyono-tapai22-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 72cd21e58f25ec1f5a9b7b69ef3f4973df4b960955726fd86438213ae51819f1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fitri-brengkes28-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9eed2b9a5325b6dfe94758219657f82ff5f58ec095ba78bd4757917b1de68d8c The package fitri-brengkes28-sluey was found to contain malicious code. This package appears to be part of the tea.xyz token reward campaign that...