MAL-2025-173861 Malicious code in diva-banbfo-imufa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3189d78759abe436d8f5aca60404c2db2b83adccc274b8b24c5387aa3a36a63b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in god-tumva-diabilu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f71ab4e0cffcabf959b0ae0cbd537e610b97dad9d30a00de905972d99cd0a7b4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in namasae-namuda-baku (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6c6a27248e8e61301e4db93c8fd7544bcb352ac80551df448f37110b8230137f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in vera-telur92-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 577361a89c5bba87c9890f59444d481d6ee2acbc23d948f596d6684768f716ae This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...