MAL-2025-56535 Malicious code in gita-ronde83-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 01304424880bcb7a422cfe9ad5f758bb58bd1c8348e95d2514b762887516c6c8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in stuck_guanaco_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f093579c65795f44ded33aa687420f7481e2f33f17b8edec50234a87e54020b0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-55721 Malicious code in controversial_dragon_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5fa2467253759555da784dc18ad234c3791f4f18534d1e4858f3698eae11a1f8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in putri-brongkos79-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 26d27bb95d23616f3499eecc4e132f6339442d082af1c7a0fb17fb8e267b8008 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in surya-ongol-ongol85-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e2b93fa57b2c9c9c84bc611a25026a48d5be4747fdfa729f4c753c552a1ecf04 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in patria-pecel98-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ae218d13ca900da3ef80ea9b1af73020942e48b5215344250b3e33c28af65911 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-50995 Malicious code in bayu-rojak1-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f1ff4250b003babbee8f88462f24f61d0f214de96e068c004812a7cbbc691b51 The package bayu-rojak1-miaww was found to contain malicious code. This package appears to be part of the tea.xyz token reward campaign that flooded...

Malicious code in utomo-buburayam5-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cba44464d6c8c99125a1a99254bcab6c0ab7abb718251dee868ddd8adbdeec5b The package utomo-buburayam5-breki was found to contain malicious code. This package appears to be part of the tea.xyz token reward campaign that...