MAL-2025-171415 Malicious code in jibrilbaguette (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f12a6f88bf26ee8e038df1b7a8f5130bdffae4e5e0c0fc0b90f926716cb091eb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in salty_bear_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 97aba3c46d77f5e39db8c0a701c6329154f4f05fef834d41ef427c08a31a7132 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sinta-brengkes9-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d054600f0bc8d8589e10f1d8e7957094e6fd6868bede01f7b135af86ea85458e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dewi-kue25-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8127d4845b35626d27fe97ba07ce30f447726eb202f81b42fa9a552e55f1cc06 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-93037 Malicious code in zul-sambel22-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 37ec79c57e170f7e4e792465362c6740c684a72c43260acc4dace6d793936638 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-85663 Malicious code in fitri-tiwul56-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 72a69283c3439a000532c8641ee8f31d66f0efdd46ebb7bccbc58dae2875dd0b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-63129 Malicious code in gilang-sego66-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 23814beb7b01498a4c3b29d769625034497d722076d0bde0f27e81a9555450d4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...