MAL-2025-184181 Malicious code in modaiv-kvu-ibuab (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 46ba42ad0a76390f74a368e3740557a49fc79ea968a50bfc6869f61192a23d58 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in imodiov-kufni-acseqaba (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8f3b99d0469be20c6bdc720009eb1f6e3af13a0940e7a11b3c6aaadc06b61371 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hadi-serabi34-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 132dc0945e83b993854e2c5615b4b2cc225672fddbc172dab5d70abdaf2863dc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-133238 Malicious code in erwin-tahutek79-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 09060a140c2ea9223759bc04727bccfdf3afc736ba31d76343cf7438d33ec27b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-112207 Malicious code in prior_pig_blue-71 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e91a09fe7c95b4256c8be3f7e138aed4efa21ab5c4a146e8e9905e488de244a0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-101660 Malicious code in distinguished_locust_fuchsia-69 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 13c53f4cf5cff0d58bdda4087ec99b5594d3aba5e75cf8ee7b01c27a5d765610 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...