MAL-2025-187217 Malicious code in gravity-start-triton-oauth (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 05dc11358c2821d460c58ed1e3be419761bd92b3c1d007e566b84d52e38f4132 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-172845 Malicious code in anak-jalanan-mdn35 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e1ab5e7d9a954a44c0631332d06605ac55f67cc8a3c4aea26150834f48b592b8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-161896 Malicious code in nasrul-poke118 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 414cef0b309c9ae0b3a6b05c08479d81bfbbf8ff910725252e8c32aa67889842 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in teagood-lokina58 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e40b701c6a37ad01fba820b7ca42e5823ff8ef872a045186bd043ec13db38017 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-135325 Malicious code in lutfi-sambalado82-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f88704779b82a5fd0943f56457fc424f6f8f176ecf956e84622aa285947c4828 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in bambang-moci41-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4462a30233e31086381a611a64ca6d29271553bc082ecd448817f18c8ef19edc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-123134 Malicious code in sari-semur8-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 47fb8557e98e7f81adf289d84b9d62f4521ebb0101460713fcd1e9b859a71649 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in wawan-ketoprak5-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d4c7c380742a254c4388892e12639f6779c99a2f72dcfc36677ca174c839f8f9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fadhil-bakso80-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7edd7c2ad7bcb696718210d75de89ff857f034e4cbe3fc0f91efb3989b7c455e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...