MAL-2025-179890 Malicious code in lookingan-jeje2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ff8c132cde42647f289c34bcb8fed8cab1f1befce1696dd4e6a80e6c197b3ef1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in backend-hercules-janus-leda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 546044f30a3c8d955fe920282e9d5666f3751d680bafd4e63c08e0bbda5b156f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-80014 Malicious code in miniature_aphid_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d11906fcfb5db2395648719c1b8fdce94eb1ded0c7282c0a505ccf01514124bf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-77334 Malicious code in citra-mendoan77-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 70b0300e442c174f09516de3c4634d5f8a5e8de35c35dc60a734b0fa3b5ad965 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in iwan-saguer85-sumpek (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c75363d3f77a4cfe4293ef018cca7c3fdb77ce0e0e21be2cfe7ae57d062cdd4f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-60913 Malicious code in narrow_unicorn_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c2c6e86abff587fb8fae5c77fb0baee5036fcbfe020be864dab209ca0e6bab3c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...