MAL-2025-182410 Malicious code in imodiov-kufni-acumnacfeagac (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d0355e7c2f3afcb9bcd0ed968412954da0adc4ba1aa1eaf4273eb11811b47e1a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lookingan-nanakila49 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0631cc6c7f130e2c08e5157dbdc41fda3585b8064dde968baeab23514e6b14f5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in avinsah-afbiafgaga (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c1d61a55d21dd07f8e2f95d89ab76a51c0a073476973d0a2b374371ae4d70b18 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-129706 Malicious code in reduced_goldfish_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 132434690ca57d4f736176b603a946f93b27b43ed990f9f11b474a287b88c3ba This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-128075 Malicious code in kurniawan-nasi35-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 26e26d80c6c83387208ab89b54910ebf08ff9bde64e8c96e9702e57aa1ae09ef This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-101041 Malicious code in courageous_monkey_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 26702ecd8c3ae265965be564eee486f6122c8a0aca8464517be462ac26657437 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-62302 Malicious code in cindy-sambel93-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5824719ae09b82d3a54a41a58c66d28a1778be7bf002eb404bd5a1a413f10d93 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...