MAL-2025-188559 Malicious code in parcel-paleontology-configstore-sails (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 84db047468bfb79279779fbe823f9d8205a87bedcabed0c21bb484de423879cd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in amahu-sautg-infar (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 17d232bc4104f3351d2208f93c20f960768165ced37792621754adfa7180636f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-159899 Malicious code in mansila-toaviula-madoliso (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f9b13d7ddf2398e777344c663cb13dd885709f93d5f9e6a70436ec258a7bcdb5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in iomodra-foruai-agouapai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dc5d97ed7353a527ae567e6ab9d70816cc1b7c10ad8f57dd82439e8f42c86ed0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nana-moci66-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 440abad965cbd626d866dd45fe384d9613d73edac7b4d2bc7c10d671753bbd8e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-91760 Malicious code in veyladepen (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bb93573a4aebd0f6e76603aba9310538fe3f3ffe08d1f454432c5817bd8a9bb0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in bloody-rose-constrictor (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3da676bcf52118dc04dd94274fe69502a840fa95fd2da3dee1299438027c6f93 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in qori-sambel41-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6a82f53741d525ad97f721b9894dda02fbfa58b8946bb50a3dd942fb56584fea This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...