MAL-2025-171666 Malicious code in novahunter (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a6505b5084860f7c115152ef87061c3163320eecc9393873d20f2c9844745782 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-89809 Malicious code in qori-brengkes97-kyuki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2356b437fea94ee464c2cbb2804cc219b701d08e4e917639aa29172062ea17c5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in distinct_crab_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 06eeafff73ea62560d79d91ad7d50190916774b31dcd353b5b32307781149151 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-53568 Malicious code in nurul-saguer68-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector eec8d58a947bf4817b7e2d02999e49c0c665751aa43abae6802a72560118fc95 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in candra-nasipecel95-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 056dbdaaf452904cd925c052e42ba36b5ff80072406f5b0f8d900aee01eb763c The package candra-nasipecel95-breki was found to contain malicious code. This package appears to be part of the tea.xyz token reward campaign that...