MAL-2025-184126 Malicious code in mlokok-lofeki-afahikuanaugai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9bf6929e7bc03287d74686b0bb8f0df2e7cc90c861ddc2a516f2710e6b8da008 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-168504 Malicious code in tealove-nice26 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 336c38856b9520350340dffc2132ed90f3ad2a0d2e24dccbfbd6ca56dfffca6d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139533 Malicious code in aquarius-adonis-vuetify-xml (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0ff73a1b6084a0a234b5afc948ee60df5e2b6dfabeb69b2b8cfbef60243f9ac6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142826 Malicious code in ganymede-uglify-js-quark-dotenv (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector df50c36528c4a8e1bab4e35ccc450588e1ba30021f8c1a6b0fc5acae6fac685a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-124439 Malicious code in yanti-ikan96-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 435793d97c66638428aa57750b119185b25d664d86567b39a068f27e0981a414 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-53586 Malicious code in ocha-esdoger69-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1d8e6d242e40d12f8905e0b9dd1849ccd1caa9cb4388b615d384e041e1c323d6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...