MAL-2025-170426 Malicious code in verify-aysali-aisai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1d5df30db95b7343b3aaf3d3e37bf8241c0bd6f8565169eb1f53d937b3e5ec72 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146796 Malicious code in publish-nextjs-halley-nashira (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f79f182e64fdaab08e0712c8d14b93f0074ad61ed9b5a6edcbf3f506b35260d2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-118828 Malicious code in bambang-klentik96-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 33f790dd463f9ff8559c3a3d735fb4c844ffcf3424f50830e91540deff7bf58d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in spicy_fly_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 35513c635a013688cfe0a6dc390b9ad48be5a3cec3d32a95633de995077f3ea0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...