MAL-2025-189372 Malicious code in scale-phi-deserialize-nu-sed (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3da7cfb294f277c58d7e8fe6484b55c4210fc860ea9b97bd8165568c264fb168 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-176725 Malicious code in nuilva-buyavadia-manaha (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5cc8dfa25a904495c182f30031a98538af51c7166b0af7134f14fd3c751b3220 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in colonial_starfish_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 181703f457f49bbc40ca65086573a13d6f58e16bba4fedd92bbcebbd6a092a3c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cindy-keripik91-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9f0952fa25d01dc8ba75b5b5ceb037392391d3fde630ae9acf9cd9c9cf2c134e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...