MAL-2025-181283 Malicious code in @akunsansan0/karedok14 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8002834ffb5b2a795e730681a6f3acf6b237f10b301970add5c54d833d41ab98 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ewa-poke16 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 589957c0b687fea40bab62d6652c24552314d788d49a22c71ef97eeb2450ab25 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in shilang-poke103 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 73116ca0da86a13741712d21b904a301b3714a28d6b57d85750828da655b7cfe This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sinta-miebogor54-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8db0d9e0976d30195ef44aa6e602c4cf1ee48e509c7876b72a703593481df035 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-93214 Malicious code in amateur_cuckoo_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f82601c189a349566babf7fb265885d93d434d291423ad750b4a7ac85b6b0107 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in autonomous_eagle_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2a602dd0e329056d6f1b5c2a7459aebaad2b2dbf63357c5ba2491d35f3bd166d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in budi-tempe16-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 22f564dc1e8444fa8cdb3a8186af57c3147ad773546089adb5ecf04e4e0c3bc6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...