MAL-2025-157064 Malicious code in jimmy-poke1 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3831f95f6c886a63b570e366399434ed2b8cf8018a6afa2a608df475098045b7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ursa-middleware-express-europa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ba207fd9cd33feba39f2088ce036150bd5cfd54db1cbb8c7b108f8a6b527c224 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-137167 Malicious code in surya-serimuka52-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 26d41428857a7da3874149232297c651ba7e598fa4346f3cf57b0cd756cfba3e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in wild_tiger_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 66db14cbd757d35944bb0fad101f3241d42631a8079fc945c2e1ea13491e4464 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in wati-gembus79-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a1f317789c25a1c1a54fb28d7e5c6843577758bfab74e7fd6dbfa6064421a0e8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in yearning_locust_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e29d56b37d79d4af6001d682eba04b6bd8cc325b3b5445ef0134388bbca3376e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in unexpected_hawk_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4959b585e00a798dda2733f2a49a7b60289174380a94c9c1f2fcf01c87d2f2f3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...