MAL-2025-174993 Malicious code in ira-6 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e6467432729941e6eaca9157f04812bf3ae5f2501e370c27a52f1c942bc4953a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in less-socketio-loglevel-carpo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 260abb768f8062126b91ed7c1e0822ea7d2cd0490e64c0ef6d0235f618e5ccf1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-126492 Malicious code in fauzi-nasi79-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a55870b7d918c9e3ed25e1b2ae7829a5e9abd8b89e9656ea455aad528e3abb49 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-120332 Malicious code in gita-oncom76-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 09323647474f02f6b49bc229912a224537c3d0944fccc13f86088dc2bf80da8c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-100469 Malicious code in cindy-kue24-remi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cc89a12ad5272970efeb0bee0d2c6d75139fb74a866b5569aea655b0e05acbec This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tomi-lapis23-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 544a7c713b91bba625e146dd3f5bbd9648c60517c64c3f1da7f2429d735a1d65 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in spicy_swift_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 16b00014e8771d688fe5ae9a1cca17bedaff315ca49d1bc8276b6ed5ac725e18 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...