MAL-2025-139658 Malicious code in atlas-sirius-comet-europa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 97fddec731b84136b26868a5785d71228d094a80260d9bc714df326b31567ead This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kurniawan-kembang96-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e0f62f4b549c1970bbc3ca978ab51d390beb44d4688bb1a43063f467c322e74d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-105021 Malicious code in late_guanaco_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3592625e8b09615e807b9d48c5ff3a0e361913cf9fffa050e810c47c939c3ecb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in andi-keripik5-kyuki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dc6564bcf07516dfbaef97cb46ce4fc6fa885b3f9078ee46363417ee28933016 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71238 Malicious code in uncertain-turquoise-cockroach (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1869506b7dd4e94aabb4ee487f2edc20c7a89f3df5eb19d7a481db4401e39ca5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ade-mangut11-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 00b79dbfd663b2f44b3daeda3d599b8e5a5b45a00858b8b322e35bbfb61bfdb6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hadi-keripik99-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 792b548a6f71c2793b0cd8b68af26145b027c29726d51cda00a99c012b1349fc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...