MAL-2025-167181 Malicious code in teagood-nakama18 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fee0243d094c2a1acbe61e67dee6d0d467bb4c639cd7994b287241fd70c433c7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-162998 Malicious code in nokire-nakala45 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 253a15d3dfe8dcf5275a2220a9d90ddd38e217bb4d3aa9672df2c5a81b76f337 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in koa-kaus-sirius-draco (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f5da38434c856097646612b2314c16d72307a75149247333f78b7090326adf12 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145232 Malicious code in mutation-spectron-elektra-module (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8cfc5d8be3241831b91454e7c38a3c68b1bd22f5176c552f8e6f778fdcaa045c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-128403 Malicious code in lutfi-rujak60-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 34c6506d0f347b386b523436e653e046521d72598c0b3ca6f27fa31788c9f700 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in zul-tahu19-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7ac3f3c78a34917fb496bef52691cffa7691a896471200e961d23c9e1aabd65d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in indah-brongkos12-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3b8a76939555467adea67679f19e67db85e2c367d9c3c214a3976da1a3655b76 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in utomo-lengko72-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0634be7ac93b60be5ca7d315bc996933768b52c3897affcdc63b1604ceb462f4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-53991 Malicious code in okta-sate37-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a6fc942657f1b4e63e48ec85232ab7ecd74819e1b1e9a0d642ad58b95bebdf19 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...