MAL-2025-187034 Malicious code in fornax-materialize-sails-dactyl (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3e47cd906f3eac5ef7031e9e276accc0a01baa2d72f585d855e5404f4ed629f8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in astia-alabki-maloloikaiafa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 189e8d25f83537c65fa518a905277f19a4b2a31fb9e132d4a875458659e980c1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-130012 Malicious code in safe_koi_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 86e9915989a59863fec0cbd999fd37f13189b33b5374e94c6a8c7fa8af073299 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-123553 Malicious code in theoretical_jay_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6f7750268afa6ebdb41c4ce95dd0dd867025a4a3177667ecc0b3867e95fb3ad6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-98803 Malicious code in mammoth_jackal_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector efc9b6f8bc1694191efd6c10ea20af1ff18a8b537596e54bd82d80d7226af1ba This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in iwan-mieaceh73-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 77da58ae2825792cdabda8f6df19ee8b8513f5bb961782f7cbd140f8831bc266 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-55467 Malicious code in budi-sate92-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f438d8aaf06d4d0c9b1ecc299623382b7b057346e7c682da6c2b13d490663b95 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...