MAL-2025-174970 Malicious code in ira-30 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4b4e2dc723998f885fc6b543752c982334b21bb05497addc952f3fae19e6e81b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in figures-protractor-changelog-fusion (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c6927adefae2b36f27f179178319310ec17e61ada0fa07dde6c9c2c00d2085a7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149447 Malicious code in weywot-triton-wolf-sedna (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 323c76a23fb4b2ec2a76ff4c94f687642511b026eacfe0b07ee54c8f8ec80fec This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-126557 Malicious code in fitri-empal68-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 33cddd1ce7926b88f41c7cdfc328bbcb8c5e86577686709583f2d5b89ad8e26d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in relevant_giraffe_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7e0ca62819839f9361e30423f687c2b377bf18bb598f77ba9e867765dba88f21 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-99032 Malicious code in able_harrier_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fe8d0e8ce9743e6630302561c8573624425444f36def9fc8681ef1624cb8f610 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hadi-bubursumsum72-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 855d957b07da7576146587e4cffd4de81e4b6b6c32e97ccfa470f1f99b2cde8d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-62819 Malicious code in erwin-nasisayur91-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 38503d4831fe1682dac02790e35131f357c84cd681310bf615165df4e9e99aef This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cheerful_smelt_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0898b8bb71e22e87a93cc434d697dc8090ee15cb3319c733cf83ebe9f58a863c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in plain_newt_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector df44e83fa101f5c05fdd63adbf8ae4afdbd715ce26e312936907344346bcde3f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-52338 Malicious code in ocha-kue33-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1168f1edd2caae79be646f87f1443c19f93198517b5af610710879839668bfc2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...