MAL-2025-61232 Malicious code in safe_swan_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 436b7e2b32d4335e9f06eafc43faac6011d4e35511a7bb3987604d2ee3f4a509 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in yuni-tomat49-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b9917ca154badb7cc24380a2f35c15d011ac4f9020425616d7122b6ece675e4c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in excess_bat_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 264a34969c2b4a11e3e4b8e675408579ca6daa82af63451ef2ef200d544a7047 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in patria-lutis34-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4a9b051de3c6bfcf5dd6f9fcc89be3ec461b88e34731d36b1a18e26ce9800d98 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in putra-oblok66-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 90936a7698228e20da30d72410a0535f26de29b11ed2c9a5db8cb3402e224aec This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in maman-klipo15-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 892513de5bd7ca7b54b4349ccd23a02e7ffae948103a5ba835fcb58a5e14e16f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ida-saguer37-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 49c840e493b9f6015f0f0c21bc2cec26a9a3b834d0d025bee0c7b3b3c0d33d24 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...