MAL-2025-185770 Malicious code in bellatrix-odin-redis-commitlint (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector abb2c6e623c7d9e32f8ec2d22c12a773727da425828e927da38a134bd8f8e17f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-182516 Malicious code in imodiov-omfi-cafegxadad (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1a5e29e01253e186c06d23222eb2ddae2ed7898e051dd1bb4df97d5816f26971 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-172120 Malicious code in apasih-merahd-grsale (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 27d889778cbb781c565ab245da62758af0316cf2c3909b1f01621e86f855a0cd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in frantic_mastodon_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c2352bbc7f0b8e7cc1ed3b087388c60c0e14bb4fdd366c502e76a15d4535620f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in citra-gaplek73-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a077c7024b2629df492ec6dd222c6ced58bcb55e95d16aa7ac43704ed32f81cd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in near-orange-raccoon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b90a35109ed738f41da92608770c3c65c5b7599867c3634eadc60eab391c14f6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in provincial-orange-quail (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 37e679c1243b387847e8b9dab20ef639d8415ac0d7f58b8b2711ab4ef09f049a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in oktafian-oblok76-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 19ab165a12e0602e05e9ddc0f130f03eaa697841e450f787afacfa2d4ab5b8ac This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...