MAL-2025-176645 Malicious code in nuilva-bava-madivunav (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f6b9634db5b9691780b2d188e737ac8164c5988c4835bda7f056fad77a6c6636 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hendra-getas87-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1f86e007254be69c8a32131560cc9712ade755b3ce2d240745b49b1ad447fc7e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-122052 Malicious code in nana-telurtahu26-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a136911e6c8ebd35da0d881b7eb4c7788678f6f433a1d2e4f3c8d2b11d0dd414 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ogi-tempe66-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6642ad0b2e85863f3368da5b6da900855384ffc785f2f15e2cffa4fb466791e9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-76176 Malicious code in wawan-klanting11-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c8f93a60e19226442eff979aaae04d6ae05c9f13934e02534eefad405d76fa32 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in keen_crane_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8d42ce53f9faf1b5a4b831fcbe29ae57bb86d2671979ae4d815e17707c6a125d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hadianto-jengkol18-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1a4d74f6598750b8f275289848faba761dcb9f709e5eae89f40524d974ebcea7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...