MAL-2025-175628 Malicious code in ksai-kil-koki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4ad1ed36bf7ffee710d9cfc80e9ffcc0e80625ee4f1a83d27149346aa7e91d1b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-161956 Malicious code in nasrul-poke64 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d8ea95a5a8310c6b0291a9cd3afc2312d3a7fbc151c527096afc7c417020e491 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143973 Malicious code in json-figures-gatsby-standard (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 00f0f17392b56d80f72cd5d178af7fead25d375c34ebf71364de580a8bc05822 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-99617 Malicious code in artificial_perch_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 880b049719533361ecd063e7f9732f1262c2c182bcf049d8ffbeda77e48ed7ba This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-98706 Malicious code in excess_silkworm_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c75573e9ade14997fe01e4e88118c7cd8b106418dddcac4932c6f7e94f7a98c5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-98265 Malicious code in putri-keripik23-pore (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9164e3bf4beb5e42ff5688b65b7941fdacc4ac7db6342d355d366929d76893f1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-93125 Malicious code in additional_bonobo_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d3f93a4b9aa4412a2d54b965aa779ac9ad74193bc6b4ac95dde1a9cea1485ccd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-83508 Malicious code in bayu-kentang43-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 64c42dd5591247fc8938d81ccee30600f14196b3b0d15f8134821c42c8f80320 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nadia-bubursumsum31-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d96f527db22dc1dc98eca0d7bb5b9e33dfddf714596df9185765a713a744853e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-52645 Malicious code in vida-tahutek28-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2f39bce789c5a80f6bb6eb7349e2401d83696308ac093480f3b459cb7e447324 The package vida-tahutek28-sukiwir was found to contain malicious code. This package appears to be part of the tea.xyz token reward campaign that...