Malicious code in @akunsansan0/biru17 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0c0e585a6d76b1c0889e4e1033a82364482527aeb29d6ebc314d408ef48854b5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-159412 Malicious code in manadsi-sdada-mivafifdda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c880c5c007c2fe76a16ab96a4f9fa011c42c1805e7cb9efe7efa69c27c4a965d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147601 Malicious code in sagitta-koa-io-axios (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f4851a6afc2d0560423e4f641238690dd6144607978993a528fbaa40438934d2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dian-kembang95-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d82d6ca62636e066bdb83779cdffd96f76b9dbd1d0fb97a4cd78d7bf22e3d880 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dying_cuckoo_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 67df2583d67ebf839cbca8728fe2a81a6ad3235915a058f969ccf27cf126938a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-91662 Malicious code in various_wildfowl_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9ac1d18fcb1a4758ebd5ee93eb9e2a985bd2716c1b2e0c7c21c06704293cc66b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-62327 Malicious code in citra-lumpur72-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0ff7cbf1ad91d1e64d1074578450c7400ad4bd1040c1e757e019f45430a9a746 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...