MAL-2025-183121 Malicious code in item-atim-kubu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 037fe299eddac5e596eb43434e60ab3e6d0f2945568b168031ce7875fb033ff6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in billa-27 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ff68d2aa72828dd25f7fcdec5a44fb67018193ed3384ad58589ad489759dd6c7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-169191 Malicious code in trevora-cir136 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6738a19658d6d4884693f35d9a1c466ad08ead5d0e58569d69c01630577092a3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-162503 Malicious code in nokire-genji17 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ddf515f59afe9e6f444a7df859b0a0b5ada5cf6b699be3a599f16af1f5ea9155 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-152734 Malicious code in arif-poke27 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c49014ae20e8d387a5f686a193eb0f5c4addadd3e2d086562e90f51054b02fee This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in resulting_spoonbill_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ca015037beb9547dc3548ffb68d7c298d95df145459aa1a3f292e5365499f355 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-77036 Malicious code in bella-gado-gado94-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a77741b09277a207764f0b3cacb38f29dd86450981b0b08772c46bbde0d46c8a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-74925 Malicious code in putra-gudeg76-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 47adbf7310449efd4ad27c9c679a0b230a2e7e37afdfb482cb4331a0b8579578 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68699 Malicious code in hon-fuchsia-puffin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ed2cdfcfa5deb6fe70944c94c3e46145425120e6f3ce50826efc688c1da5d490 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in criminal-green-bug (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 510938070d9a14f3458d5c6caa6e4acac517749dd78d028281014e3977ade2b1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...