MAL-2025-179028 Malicious code in tersui-marina-nutru (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 698fdc38ff316f24bd97d5563a8e1dc7e8a4398d89ad3488ed6bea18449dc2e6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in manadi-scisor-rmana (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 005bbda55e07a25e7a5caddd48489da7e4ec5f9a6ecd26ac28983b0c1baf7c3d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in syahlan-poke110 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a2bd26988f770cd8f92c15d46024b6f89ecd9158bea88272adb443fa6c4932ff This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-132577 Malicious code in colonial_stork_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b50f0179a0f3e87e38e320dab22ce011811295d8d75adfabec985db7bce7f372 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-72060 Malicious code in bambang-pisang57-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector db502cfcc52d99d59b8553eff78bd6a0334097b5e8b46998c294710192a80069 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68220 Malicious code in faithful-cyan-guppy (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector eb0bbefb1da2fe9570c33af8975c81a61e2c0892837314147893dc772598c841 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nurul-kupat60-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aaa3af5d4d4fdb2d7131210e3ecd66324b1df1b2fe44e2604cba575470d8224c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-35540 Malicious code in test-mlw2-huffy-chewy-algae-piccy (npm)

The package test-mlw2-huffy-chewy-algae-piccy was found to contain malicious code...