MAL-2025-158383 Malicious code in lookingan-nakomi25 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 733515eb6b4d9adeb43540c53723f2acb96cce913f8fc44db6f2d3ef216c154d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-161201 Malicious code in nabila-poke100 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 59c0d8313f5eed921302657b7f1776aeec4b30bbb64f760ac5d6f5b9581d2992 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in yanti-klanting91-wekto (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9108c349ec3b71d4377e0dcefafbd2c34ae1d66a11d7d3a187bf2c1efe84e107 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in wati-semur16-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4d789ca605fe7071532c1c56307c6fdbafb204c0d27725bad0c8bb71e6902f90 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in qori-lengko7-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d392e8f585c2623f1319c91b9debf53097aad7bc6e652419231eef71cdc68bae This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...