MAL-2025-187349 Malicious code in hermes-websockets-arcturus-meteor (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a36606ac1ad475e7549406f6d7bf78dea41167443315514434ec7399172a4d26 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-158406 Malicious code in lookingan-nakomi46 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 658fef3d89151fdd661396a64328caaf0b9c8d5d60aa60a0afbbfe10e6a2cfd0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in flexible_chinchilla_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 32e1f6234330a3c8e7f8e44ae2610c8d93d3396a85c0d5edeb0b4176e8786bca This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-62259 Malicious code in cici-ronde63-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 490e9705ec43366d0495175b589d4da557f3003e536431b043153328388808cb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in utomo-ubi94-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 951006b1e28575abd14b347dca5cfece8354d6f10da8c30b456934052d1dd0f1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...