MAL-2025-189784 Malicious code in sync-decoherence-xanthus-express (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 302cb9295281a82475b3d087e5c9d61e6f97dff44cc081a850b4044c5e0991c6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188524 Malicious code in paleomagnetism-dysonswarm-async-remark (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bb17dc6d228c7901b9fbd0e03461feb58c1ebda6de23469bbf3f76dbcbb588fc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rollup-plugin-changelog-oberon-nextjs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dd7587ffdb4cf843ecc0d5d44895d41406018eb6be3d4fa04943f6d13f0b1684 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in natural_tarantula_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b20b88c29c19fc4e8c29029bae380c8d953a945cdd0f0ea99d797a2a28d20392 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in yanti-mieaceh34-tititugel (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dd594f10478a1235d7d4c92d492eb1a9fa6480426f0af2efd3c3489fe362d64d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-77623 Malicious code in dian-rangi4-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 25a9ca6a1d0e1f28de306bdd408f74187a4f240a898c7c4478ccb331978c3695 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-56597 Malicious code in hadi-oblok41-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8f0472173437956a3da1f46d6cbd21905d13bf7be15d434ff43e9da44e9fd95d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...