MAL-2025-186632 Malicious code in double-file-encode-moon-virtualize (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f10f8c7b46a34fb8cd76f802a955287a6e735d17496a721553248f24725219d0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-164480 Malicious code in polymera-manuyat-pe (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 08f3b726b67ba1317507d4971e98bd39115f05afda3f5ad419b81f1cb56d218a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in enceladus-vuetify-foundation-jupiter (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 72476d2b806b3687d1fa43ef3713ada1a16d869cb5a1f91e4df2ed45c57b6dbe This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rina-klanting82-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dd5781015e136278b09af390af22e7ef18862fb11243fc6286ac0e595db65b35 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nutritious_octopus_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cd72980f8595de0bad9d6d0b5c215f6fb292f2c5aec5cf27b851718cc0cb70c5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lina-martabak13-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5b39e937cbcd41498832222556bdf5d47658be4818dcfdc838f3e5f15782b12b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...