MAL-2025-188097 Malicious code in module-barnard-ganymede-sociobiology (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 318ce5e99a1844c93f91036e8137e440098fae0a90415e943e5bb1c3a0a191af This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-172198 Malicious code in augis-po9r-no (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4d555e6c337a9401f7cabb41887a8eca3a71e67557e16e25b13d92a574539c50 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ida-miemee65-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 13ad48233b389e5d717f608b0af942a4a62e80982ba998639cd623f44150569e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in putri-kue42-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 270b8de57037a7f76bbdba6df5836f8b0cde0b6cea6c587f63cba8d778e5e040 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-108506 Malicious code in selected_snake-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 402cd394cc93e05d67bada41f84a791f0f803368a1d653817bb971988367cfbf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-107703 Malicious code in rainy_tortoise_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector be04aaa391c12bd6d586f92ad274b8260a23aafd81624ec66c3ae715bc2cd041 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in eka-mendoan81-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3bacc60ed95df3e19b12de4b5a27985ed73d680bd677b212768aa7577d188995 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...