MAL-2025-182571 Malicious code in imugay-avg-daiugadajdfij (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1143227fa74c49258c9f6e6cd14407ad2176492233bfac808761cb6b336cfafe This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in anabuy-inznu-ninni (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 422f7d495d6a94c47fde2cce621464c1a50091c0502b58daa500e7bd1648a4bc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-180194 Malicious code in teate-thy-sonic-beri (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7ea3d039fba5c92d51401d6265ab6ac3d946e4c3c397681b88815d2adf082cfb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-132397 Malicious code in careful_wombat_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 62bb9a32fe95cc28a617e8ffa3975eb8984d6e6d9b3907d4e4c384b12eed600d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dewanto-klentik63-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3a8401d0157da24144a24c9fc4d90efba4fb8b9fb78af55fd9464a0424d6d98a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kiki-jamblang75-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 823b9f7667900948b4a2fa962af2a921b92bbc83fcc720f0d8cd07a4fc6c5493 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-93341 Malicious code in back_narwhal_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a8c9e5272d61b9033f96bcb0f0d90e963e7292a7d45816f45559423491255fab This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hadianto-kembang28-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1179da227b394bb941f9525b0804a68130ad5942d7f144691ff0f0a35e7bdae6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...