MAL-2025-176339 Malicious code in nokire-kushina19 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d7c7a09c80ddf619931d94a086524adf7f2e13fa53bb158aaf41ee09400f967e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in start-izar-meteor-antares (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d6bbaa8857adffc1887054498110d02d4405e7640cce3cc16b238ec53cc5f0a6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-133133 Malicious code in erick-kue51-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a0f1244a755e9e476928f7ebb020c4dbbdd89fdf03d8c329595a14996c66c7ee This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-137003 Malicious code in siska-lontong100-sumpek (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 168cf9b39f606ade53fff6709d43740db398e471d033b0932eaded0c9b66e85e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in eka-kembang44-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5c0d51a4e6a8f08a41ab515889f0b76298554a44dbbe5774912f185f330ad85b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70627 Malicious code in similar-amaranth-salamander (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3d6319be03b372d20e6f624df0a8049bc2e1455a1e742f5e621985787d042c0f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-57670 Malicious code in mulyono-kue32-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fd0ceb5816374371aca3769bb406d9b2afed1b8361c353e46c47121061c594bb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in bella-keripik86-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 77cbe663adaedbb51fb61bfc4d84ce95eb78e428f02a38d115febf04196dfedd The package bella-keripik86-riris was found to contain malicious code. This package appears to be part of the tea.xyz token reward campaign that...