MAL-2025-167242 Malicious code in teagood-nakama74 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 84059980ee32c05e401f3db105d493d472793700a2d7ff46bf5a9f4bc238da6e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rigel-less-lint-changelog (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f0250b17d1e824b9261142e2ef10bcd989d933f1fe55d49cfd55a9fc7ff406bc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in yanti-sambel5-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 85e9956507a40549a3c75cb5f36fe2db1549da2fd490887f26af0678122ce85f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in arif-kue20-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 48d2acd879eb10d3c4f417b4c189fe3aabf073a001c53af8e81e79097facff84 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-127583 Malicious code in jaja-gado-gado78-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 401d6c6ed4c4a57c6c7a49fd0d17f55c9dfe83881c7496c78bab03baa45c0f93 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in patria-dradag25-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7f402ade6db8415aa72830e27c4bc1dd969d8f688d413fc127da4923cc707f59 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-72918 Malicious code in fauzi-bubur70-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 34f244424025bdc8c31f690f6b6aa9485bd5027772d597c9e7e87c45bfc7d601 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...