MAL-2025-115207 Malicious code in kresna-lodeh29-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 27f844fd0de7088ff310e3c801452d5d9830fc97b2788c009597576624460b4d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-83546 Malicious code in bayu-ruwet90-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 166d532a99196aebf400c6aef19fd122a9fcd3629cb4cc18789af6e68b16a064 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-80389 Malicious code in ocha-rendang10-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6d4b2100f2b3d3afb837504c851e28a824be7af5419cd32395fddd860cfa1008 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-74620 Malicious code in nina-papeda56-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 696e74f915982c30805bfff9fea3fa9d8fc48105032864c499f6676f63696bb1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in reliable-bronze-silverfish (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 67477320dd2c845859b97365f5cfeec24ed1a51d06462ef1d9540cb09b672790 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in maya-taiwan91-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4ce60b5ae418f4c19ecacbda25572fdda44badeafb0c0d365ed29bb98e856f70 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in patria-miemee43-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 11e31720f32051fddb3985adc14caeb135c8845ca23c67658dbc8bd595368d8b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...