MAL-2025-186293 Malicious code in container-tree-signal-notify-permission (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b71d5038f64d6e372dc504ee04667b316a274a372b8dddb45c2cd8c93fd779d8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in manu-oyi-gioafisoi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e948acc55ead6175abd00658e2d85ccc65c79f1940193cbcb0069b08771f731e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-129402 Malicious code in pregnant_dormouse_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector be7ac705e3e07785b2a21bfd5dbf34a0d45b5f66591a60360d95a2481c1da835 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-122539 Malicious code in present_turtle_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3ab095743f70021105ac7dabf49f50e92c25c6444f96747a7af19185a7703d3d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-103495 Malicious code in hadianto-kupat33-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dd9935230f4774142a2c963a98028c261b04da9dae4795bd6d7e2b1168f86eeb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cuckoo_scarlet-99 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8052c846772a93d38fe3cd3ceec6f43165de829377337cf6c74be80bcd24f2ff This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fadhil-bakwan100-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 79a4d19929e48905c669cffbdbf0d298fc5e8f2e14a7737e70b7c9d2ff966118 The package fadhil-bakwan100-miaww was found to contain malicious code. This package appears to be part of the tea.xyz token reward campaign that...