MAL-2025-181747 Malicious code in avangi-ogolia-inualubami (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f4e2e44e7f5cfbee56d522da08697fade27491250de94613f8f6bdc9625e4829 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in auis-lepaod-maan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8c863a1a1c7b6b1966f8de1d458952561fbd96fac8b166d3029e28bc35bee64c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-161689 Malicious code in nabuf-otomian-dfaju (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9f8d3bc081e499ded15b63fd70b5b80acfcbdf3b84614c761e1d82fffca4f3da This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142154 Malicious code in eridanus-registry-nightmare-miranda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e598b5c68b81db1caac8bc9f7943296272cf21fefb75a73711750c94cb94c330 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in graphql-enceladus-meteor-jasmine (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f303dc4fc3654d2483f1bdbe2bbcd9922173b5307487abd9154297d5ce82c078 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-102927 Malicious code in friendly_gopher_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f5f78090bb482dd4c5999fb606a12cd194d80fa4aab39b5871e3f52712899b39 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in maya-taiwan70-crottsekebon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1def0f0183b85d8d6fd8814fd7ab9e7186b9eae77fd85f4dd6340770c98fe898 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-75272 Malicious code in rina-naget57-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b49677d8a2acd47f25e65908b7feb1c0a4fba46998db4ea1d16706ea6375e2e6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...