MAL-2025-187190 Malicious code in good-chi-nu-info-hash (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f42b6bf2a01b6334b369bee120683abc5377dbaa3c0215c6a61aa6e01154bdbb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-175080 Malicious code in kapino-samunvu-udvdabi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 41cd263bd877b79059636cc5b21811273cbebcae82f27b20e34fd17f7aef26ca This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-110281 Malicious code in utomo-lepet30-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 301b2e8b080fce8a33673e38102a728aa2c2d8ca4e1ebb4dba8699f8a3549d0d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-98276 Malicious code in putri-rawon52-pore (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6d2cd86c316733c9111bdb1013e5023e06cbd97c5321fb7b7f0eb63636c8f83e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-79639 Malicious code in lina-kue32-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 34e33838233411fdcdffc2a299dedd550787ab99482676cf09305c91bcd7bbe5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-51478 Malicious code in dewanto-klentik55-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3f69761920a88ef612077fd8e6fdfbcf4c02fbc605fa9e86b114f6d087ab9d67 The package dewanto-klentik55-miaww was found to contain malicious code. This package appears to be part of the tea.xyz token reward campaign that...