MAL-2025-181736 Malicious code in avangi-holai-inulmi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 00789d98302d2d8003387a1c40cc86abe489a77fbfb7cade5372515c42f7d8fa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in namasae-naiua-maiso (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 123f92b8b0a3bca85d047b2557d1586d5926776ba1552ca538b8e3e0982d6274 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in yonder-iota-karma-protractor (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b77d50f56b54d38b72f23620182a6d2983ef18256cba1de345bff838382831c6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in jaja-sate60-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 09c61cd5ea35cfe2b7672028661d7106f3d7ef9795d9ba7db00c8749a490aa54 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-136533 Malicious code in ratty_octopus_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 64bf73378454296489cc08dc4b0e99332cb89b8ccc1f0bc7126001e33978301e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-120418 Malicious code in hadi-lutis34-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fd8e62b7c81740cff71931e5307286d2bcab61775aa8fc386e1387ddec6dffd3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in eka-lengko40-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 967dbee69c20878a4d1a60d160f25080f3943b79806c491624ed7700f6050053 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...