MAL-2025-186462 Malicious code in dactyl-transform-nightwatch-petrology (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e6daac7520c355f3e9987d2acb56170e40385b4c9e7bd696c70bd2584a925b30 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cometobserver (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 570b79c8e800013aa7b525f860206de1b4134ffbbf91e03ca2f85669f14f9915 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-68788

Malicious code in nurul-sasag71-ruro npm...

MAL-2025-92849 Malicious code in zain-tomat41-kyuki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 19195623064d1ef825651e440452905b8363393c764adca78e63c84c4ade657b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-77327 Malicious code in citra-kue97-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 57ee0806721f7cf81ae4b8cdfd0926ee7f4d76a2db8009c79f9d5cadc4259d1d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in competent-rose-pheasant (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 245c5c41099453d627bee3def3c4f66124b90cd5f048d00d76e8b405ca6b6aa4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...