MAL-2025-182762 Malicious code in indea-fodio-ag (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f947b63055c45190f93547ddd0c9d0f37723e3bed69e803733bcdd42e7af7425 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sahu-satg-faguao (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cc92c6cc3e97f3de02e275c675e16dea624513ed8d373750459f34a14480d427 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146638 Malicious code in promise-equinox-materialize-fornax (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4c75f5cad1d0c66172e8eb6edea35a3eaa1ad979c35d1bacf45c4b3044eaba1d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in irma-nasiuduk66-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fef7d155fd6f15662d3706859599d844cc6f71cfa8a54bf58ba09ddaaa908441 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dewanto-nasiuduk48-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2913981719525825940c22e9f3370c8d65674956312d616980ec22d8f55422fe This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-122007 Malicious code in nana-kemplang98-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 844cdf954c14aad6210306a54888b475127317b378167a9b012d751d135534aa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in putra-lapis73-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3e482d90214549d3c31403cf5275fc275a4da6f7b84eee3b14e62acbc01f05d3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-112259 Malicious code in retired_anglerfish_amaranth-92 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f809104d1a00ff7403d1dd319017190b2097e4bfde99f2825c48964410b00e77 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in xenophobic_moose_replicate_automation (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 83e4529565f3ca3b7f3d2d34c11b533a570cc92d022a8ababdc04ca8316de063 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in erick-rujak1-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 509e92a93a82199ed23251f79fa220fe6d8f64c9a97d47cf425795e848276b4c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-91493 Malicious code in umi-soto29-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3ad46a0bd75f8a1eb8b05d48dc312f70d1032632f0cc03cde52373e79ae70906 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-75163 Malicious code in riana-peyek62-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bc8ce061cc2ab3cbd5e57f57bb2ffe5fd5bb2ab241bdee6dfc3a435bfdabfa8c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...