MAL-2025-153589 Malicious code in avomainah-frid-fafuada (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 744dc867691707e4ea91b083c43cea94257ec233b7c42c95d8c659fa80c36840 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-170508 Malicious code in verify-technical-bisa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5b6eec2766ab6b56ea02aff183e67137cb626df3df8958bf17be93991b153af7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-151524 Malicious code in abu-poke17 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4494c5bf46e77a1e9137c00d3925bc43e22aab55f297b9a213220659cb6b5100 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-87396 Malicious code in kresna-dradag29-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ce4191dcdfb68b3da7d58aeaa384e7d99bbeceeee2d4d526de2e4fadff4a2824 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sari-kupat21-wekto (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 422f2fc7b088f8dc3e19ad10f2cd224800679b5020985d7d41a041ff1c7b6e25 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...