MAL-2025-152980 Malicious code in astia-alao-maif (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dd3cda08442d4fb91cc116c3c267e9295edb379217c470e3afcd09819a5dd687 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-154617 Malicious code in dian-poke80 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3fe512300841e9d0a5fd82b9fe0164e6f71da2ffc75a665d4da920ecd1e5fa93 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nashira-mui-server-pino (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fe1cbab30830c258d4279b46b8e5d3cde0723f00724a5e0e18c073551ed2ec03 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-134273 Malicious code in increased_mandrill_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 01ae336b0459f676bee0b05b6ee0d1443ab4f5486fa26af7845a9ec27f91a155 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-72601 Malicious code in dono-lumpur4-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 133696d15c046eb7791ca37a8ae6b621ee6251896a53ae64b677def8c08eb4c9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...