MAL-2025-183305 Malicious code in kiudt-acvog-uu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1009aaac588a708677af48ab3c6533a3db218f7271aeda455f768e367d866cd6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-138669 Malicious code in dry-chocolate-parakeet (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1ce4ed9a19e46b14c01e8546d308d856477d11f62ee36d04d3ecb582b270bdfe This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-121294 Malicious code in kurnia-kentang86-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c42240127f4f87928724e4815fc3bd9257f0fc7a6ad6789940f44d4b0e74eb6b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in specified_gamefowl_copper-95 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6327d105041fe017be09cd788e8aae2968c772a40b35e68edb177c7d1ea168df This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in irma-taiwan100-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5b2978f454193508f9f5e8919524e48c2edecf77745dae6a5817a31af8d50e45 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in classical-aquamarine-whitefish (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 64482e0adb352d7d09cf79aba8eeb20c513d1bfa891655b4e188668a5fc0aa59 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...