MAL-2025-172397 Malicious code in hereis-manuic-tamualiv (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a4bc3ee64eec85e911ba8486809d50c4d3b04cefaca9a68a247ee50671e720f0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @abbeey/beypremajg (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bd8b11988b92c0555d45dc775de852b4180e247c05d0c8d7ee8cad89a83d6dd6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-154346 Malicious code in diago-kalop-kalosohabak (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2fbcdd7504cd97a9ea310807bb9def00cef0726154561b01588e6baf17642156 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dewanto-teh54-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d190059e77737ad3b35aa63cbcd32e35385af0fe38253baada45dc814114bc3c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-86322 Malicious code in hanafi-nasi62-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 73c57241e03966158953dc7f34b5aa73bf2c1aa2c12c488d0f77a46c52a2edff This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in vera-toge64-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e64da64ef7ec76cb077e6278428c87fc5492032a6423086aeb2d16c4a4e4693c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fitri-keripik20-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 512e4ca553df649a349c7207a17b8dbe5c49ae77b3fbdcdc06300ef6a630f063 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...