MAL-2025-104391 Malicious code in irma-ikan1-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ba0c7bb25e758713d55790a4a3529e7684fc5767ecfc00d85ed33ee36bf732a5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-84627 Malicious code in dian-otak-otak25-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ef601302c1dd671c6741d8ebb1a0086525c3a05c23ead0b6f4f32672c886b2f2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in xaver-soto62-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 161c05ea16ade0827833f34c9a87b81d5833f38c73864e12a5e2563b40f79c28 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-61216 Malicious code in rival_bobolink_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 509b076773cc9ad73abf4877fc2522da6ba21eed0b025505833940517d96d329 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...