MAL-2025-140067 Malicious code in blitz-winston-vuetify-lyra (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7545cd37a3003e0332a5956fb7b350048ecd2cc8fbaf2458e305ce077db3e275 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-133464 Malicious code in fauzi-nasipecel67-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e711cda546f45d93373c9552261ef833732d22132afff23cf483bc0baefa4f4f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fauzi-klentik30-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 808ffd7380d5c8242db135726905458bb99c6b54c628fd532c4d5c79a9abe821 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in okta-kemplang64-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector da0c2a245482921968e963b6faf9e1323966997f56597e7471fe5b5978dd7fb1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in successful_vicuna_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 91588f235be75f5cd4baadd2105999f0ba08d36ed079fc342285825e00f57f6b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in joko-mangga51-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 05759887b34d3f3561a5622bdc0e50054240ff469b3ebfe7b220ada66f056e1b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in putri-oncom28-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 421f5e4cb795b25639ae810d5d23c959260792d6541ca91b3c4e083ad2e63e8d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in udin-kue87-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bbfcf9b5d9d7e286e613fad11cbfd581fea6c290c595933adb7e5873df40f737 The package udin-kue87-sukiwir was found to contain malicious code. This package appears to be part of the tea.xyz token reward campaign that flooded...