MAL-2025-189864 Malicious code in terser-antares-markdownlint-telesto (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a63d74fa8c6808e660d5a31301107399d05e75ae04fa9ca5c2fc86eb0c04f105 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-177980 Malicious code in polymer-gibga-aga (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 69d0e1160d19efbd2bde1114fa2351a20b9c9d882b4ad439e2e55dc5b772e050 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @mipta1/nihsad (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5d6098e870329642861fe7d7fc6b002077bf0b03c1a4059c10d8e9605824baa2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in contemporary_silverfish-teagooddev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 24c482d95de0d51eac8c9b1f1f294153ce242e4df82e104afde3f3adcfa3b69c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in joko-tapai47-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9f62e9942cab3c54589f348b3215d8c12039e9d6f303c52ebda30305f59dc5a4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-82198 Malicious code in watery_goose_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3d2ee9e7fb0fdeca7fd89f1448ac1045897f49a6da95a1516b2d5e2d9337f049 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-77534 Malicious code in dewanto-telurtahu27-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 218cc99406c576396375143bf3285e013d2ad1d9e7ec083343ad8383d4219f95 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-76260 Malicious code in wibowo-mangut5-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b45d83b1658759fae9e7cbe580e6650f8dd87bb915df9db54c63ebf0727217ce This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71538 Malicious code in weekly-teal-lion (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 072b19eb4d5f44909b4cf2b7286ddfe3cac59b1f1f5dfaf8fbf486b17ee4af35 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67664 Malicious code in defeated-lavender-moth (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8cfc0ee79a871ff9f7a8d0b8fa1d74cba55c0a722a1a8502af60dc04095d165a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fajar-martabak29-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8be056156d35ffe9c807846feb89b6b6f4a8dddd86723d91dc38f618df306c5f The package fajar-martabak29-riris was found to contain malicious code. This package appears to be part of the tea.xyz token reward campaign that...