MAL-2025-175041 Malicious code in kaka-poke14 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector be38d1f789798a2a7aefd55c3ca212eba2ef60d64f2607c8c4f339cf5279e9ac This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in jaja-brengkes27-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ddbe1db81cdda71a725f69d116134b213990b5af230951b87520e8161df61f09 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in resulting_vicuna_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 975d8b0d354e02b4ff4d7ff7bbfccbf5e8c15e31e511feca0c19c1d43073c67d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-75011 Malicious code in putri-lumpur35-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ffb3f962223df4c011d30821f4c0e74876a74d91da91f07be4360fa2e3393b04 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in roasted-indigo-condor (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 34307d7160b686e7ecb3e8d46496c8a77d5a210621a956e0a4b27659776aa012 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-63887 Malicious code in kurnia-liwet23-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2d1878bbde680636ca2cb8983f6c64cc73e30e2a543ddd3e10f09b9cade44b71 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-60347 Malicious code in efficient_python_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4248efc5435828bb9d4c4742a78542edcbdc00940263135331e467cc5c64d378 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...