MAL-2025-157306 Malicious code in kamasada-nuati-vesa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8cc3cb03a644f203cd46dda04be7ec612544cabceba444c4941354dfc0dd7ba6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in alvira-29 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2c094facace878597ba61fe7fa757972abcb40d7e2b5ae85923d44f54e61353b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-98454 Malicious code in utomo-brengkes40-pore (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c746dc8c36b5bceb123a965fa1edd97bd1c5fcff5c259aa5969996fd9a6dce8e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nina-rangi33-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8c7a98c1f0aa10503a966d73684695611dee5681028e00afcabcc34b3b6bc1c7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lina-sroto83-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 033e1a8c6a0b80d5994531234ec953d5fe03de001d240c5b49e6a9d7fe25768d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-50817 Malicious code in andi-nasi47-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 775880ce13e2f6d0200bef297680ca2337945f731c3f57d544e1d14a73ad4667 The package andi-nasi47-sluey was found to contain malicious code. This package appears to be part of the tea.xyz token reward campaign that flooded...