MAL-2025-164880 Malicious code in rita-11 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bd1e9841dcc422c3dda90298a44ac8200452a70296062bf5f0279808209f80c5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nokire-namiresan70 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a94af342775c479fcd8c86cfdbf5fd8a6b1d6a284e0655c4da5f3ce2ad533379 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in octans-cross-env-json-janus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 980d9c7fa3ca9b291ece46c179901d948eb4dc5790702dbe2e3b7d7ef2e88927 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in perseus-ora-spawn-uglify-js (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 69f9b2d497f009b9eed372879b921b29be260e3950fa8d2f8639d0075b3e34e7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sadr-prettier-plugin-markdown-carpo-husky (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5b15cc979aab6570e634d54c5e1e033330806b975bdac0cfd9242eb7f9a687c6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in willowy_ostrich_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d14eb59c187226c761cdd0e8e6805aa761596caefbac91e7d238cde7aee7a6dd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-135807 Malicious code in nina-kue3-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 858a7962d301c8f9780d2b1d3e13218e6d4dd4957ef9d8cd34138055665ffd84 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-124855 Malicious code in agus-asinan29-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 899ac5ca0d3fa2599d1ce50aaeb768a76d6629375ff6308f488ed3d1de131aa5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-123942 Malicious code in utomo-tempe8-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a86a4aa9e00d06307082578a869e77568795950a8c52b5b4ea2c32540842b108 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in grim-silver-wildcat (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 33e650abcc427e730c5e75d21895cb036015f9a38717de2fe6cff9719e84e136 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...