MAL-2025-189621 Malicious code in speleology-pipe-pino-puppeteer (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bc12667834e75d07b49fcd90c909c4159cb87514b0d23ee6ae4ae93afb1756b7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-157864 Malicious code in kupa-lubizfzlio-igugfsdgdfdgsu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2a52a56d04a84db652f181a6386725e396693321003a657651fedf3ea89eb8f4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-154271 Malicious code in demdadf-nufaio-adudo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e4e724f190307e6c88313b0515f54700d01043a07a13afa398c2db03e0d90d52 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-98944 Malicious code in sporting_donkey_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b068ebae23a6393f6a05ebdb0eeec095869bcffefa8d4732d758c9a192f0c6dd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-77592 Malicious code in dian-bubur7-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c09d6c0fe911e89479953257cc86ff09a9f9b168d51bc40e2a8d6cacaf25668b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...