MAL-2025-189558 Malicious code in soap-slidev-carpo-restart (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4ae0139684ff37091484c18ca8bc5d4cf9f1515aa5a2f6022fb21a338af537e7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-151245 Malicious code in abiba-alvabai-ayu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3eb7c2f20cc429b1e5c9f7bb6145bd4a933ffdbf5a921ec22774c4af941026c6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-133589 Malicious code in frantic_gorilla_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2464de5a7b5856997dd12a16bc701d6136380d998cdfbe5598c947df0bc731e2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in gita-jengkol62-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c985fdc5783f242c436533705b9899a50c9c7efa892ac3eb48851376caccccee This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-99664 Malicious code in automatic_lamprey-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1e0cb6fc6aa55f0639e62b3d59ca83188313f13ae4e545775b4f8ab298509e0d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...