MAL-2025-189476 Malicious code in shelljs-test-mira-neptune (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b68ec0444ac5dba5dd7c206344b20a8bd3d0cb3e9fdf7265cbb7328e028585bb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in iota-framework-umbra-uranology (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 567b98367203a0161fae816a98cc7b89570f80bdea0f12cc4757f3a09cdc4950 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cosmicsilence-uranology-io-solis (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 809f235a883513a2be1329677c5ef15d21dca391b9362eea99e89e8801830bfc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-183610 Malicious code in lomi-ifush-ugio (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0a824e694bc52478b80a1af088300ad16a89d337f6783551edf6239cd1f57e63 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rinto-poke51 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4cb1eea4049ba0cae2bff72ce8e34c81b265fa6fa6643488ac5db94cf7fe2abb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-160044 Malicious code in manurung-poke25 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 118e93e05759099e68da5911a4b73a4605dc085e3b554870dbd0c6b061af11b0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fitri-gudeg70-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0018bee052acf4c34a22927fd025afbd46c3c3893903c96473dfd5d1f17b7f8d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in patria-sambel18-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector df3be74630aa18a71b546e4cde1ac7460d80e98f0b5dbd9c27d0b40f6f7082bd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in better_landfowl_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e13e19258a91fe2128907fc2bd5caea2010cc66e039ec1e3b58c38802ac9756c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hendra-brengkes100-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0383031d397ce4aec834854187963c788c8fc9c0dfac241e61e102fdf87375fa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kiki-kue89-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3cf63452f4bcd93165e4d1e8b6849392758e43ccc4e00b9b5749563213c9cae3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-83028 Malicious code in agus-ikan11-apidev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 09a955dd1e0e5b4f0a6086d260a74ae47944fee008024ff4465388cf6ab30ad4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...