MAL-2025-168254 Malicious code in tealove-dana46 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8c4e82de685f1ef930f61ffd4f5ecb0b56e5a02fe685a12e47d951f3d5a03098 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-124984 Malicious code in arif-bakwan92-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 98dddd4e97378a085fb93cf18f1ea9617b85c249fe4cb7e5aece61508a3cdc24 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hanafi-martabak33-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6c0a8f376b2b49641ec06dbc4805ae4990f236fcb3ee24d660b06b84951e622a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67696 Malicious code in delicate-beige-guppy (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5df936319edbc12c3d59661d4a607486cd5bf1a629ea290cdef56ee6b70a5b32 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-63617 Malicious code in jaja-esdoger7-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 557a882d069bf5ed48771b9a9fc6ec58d8b37142dac62993c5693f7c18fd1115 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...