MAL-2025-145668 Malicious code in nova-slides-concurrently-slidev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8349c57f2f166e822672e88378a5b6c838c5bec0b5f8f03aba07f0521268c16c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in arif-pisang27-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1ba3b2bfc800eb621f52f5bc8791c4c0d97360834344b8ea40d826e7ac33a5e0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-121814 Malicious code in maya-nasipecel31-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2bdf18e8649a0a274a3454975af7db4e192d3d419cf64c8ac7a2d289783654fc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-100036 Malicious code in boiling_dragonfly_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5f909760542b660effc9d98080ec590d72dec778d2c85e74c439075bf193af6a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in heavy_worm_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dc70803066ef29df59be4ce959713cebe45550b851b6ae589fa259f561500eb4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...