MAL-2025-175761 Malicious code in kupaio-kullaa-jai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bbb55ccf7bf669ba76fddd49d13911312f0ddeeef28ef87d50ec1479b5014336 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-155459 Malicious code in guras-ters-bru (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ab475cfa4eedb5ca8526fadcfa0eeaba6d186f41d78f6d09d392d306fada073c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-130119 Malicious code in shrill_kingfisher_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8f81615c70ebc206d5e57c37c97fa5bbc2b1adb553ae7748615b5537f9210abc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-109705 Malicious code in tiny_grasshopper_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 40a2e7f841469114e5ddc6053b90006b10327e0a1343dd4d85e8a0f236623196 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-96337 Malicious code in responsible_tapir_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 08d03da4bb3b8c68aaf9fecf2735f5799862f35c4a22ef09c8ad7e8fac8339fc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in quickest-purple-ermine (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a1d899bce0438bd2931cafc52505ffdef936c0dce2fb2598bb6fb7f74ab92c25 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in eka-gorengan18-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3ebb9ff045347ddba5de434f71fc161c4026453f919ef0ebedf8e827b414d583 The package eka-gorengan18-miaww was found to contain malicious code. This package appears to be part of the tea.xyz token reward campaign that flood...

Malicious code in candra-miemee90-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2bfecb95c4c063cd4a3137865ffec8978adc510ec1b6eaa2507664b86374afbf The package candra-miemee90-riris was found to contain malicious code. This package appears to be part of the tea.xyz token reward campaign that...

MAL-2025-52485 Malicious code in tuti-gulai92-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 415d61032ebee2bffa7fdc63e88d9ba71b16905a2cd5f573e64189a80f741ee7 The package tuti-gulai92-miaww was found to contain malicious code. This package appears to be part of the tea.xyz token reward campaign that flooded...