MAL-2025-156609 Malicious code in inufgi-goa-jamufi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5949b8c5e7db9698c5c442aa992894c6e8a336d955593ddaf940e725367e9e4e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in okta-lupis76-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 95e7cadc887c0d824e3a76de414c021f5dcc599bbedfeeea8203243234708f00 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in relaxed_lamprey_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c41f0999be44cd85ab210e9515b5392afab6c3ee7b0fb315baac2293cbfcda80 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in delicious_rat_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fad8ec3c5a9733feb9d0402bbbae31d15cdbf513a7919ca838c60a56abcccc58 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mahesa-keripik22-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 488b8f392788585e4d53417b86387d92a72138366dee1df8bde817921b7ed776 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in gerald-soluble-pot (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 376a45e4c4f874d840cceaf239365c245d42f6a39a72c60e2b2ffca94d258623 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in orthodox_dormouse_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7954d0aa5ad9df5d13084286b1e456765330215439dec625383896ec0b1a2da6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in historical_swallow_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b237070df0f023afb1e2569e4079a705172d1da89fef0abb53d9610846ed7b15 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69136 Malicious code in liable-rose-crawdad (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b79f5add4fbbb81f0fac67bdc4123b3a85a0501852b8807b0f9018bd0f896e30 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in putra-oblok66-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 90936a7698228e20da30d72410a0535f26de29b11ed2c9a5db8cb3402e224aec This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...