MAL-2025-177427 Malicious code in poglymer-ogminamh-abaga (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bbc765a9f46c60a5f3cec05c1bff511ba8b018c705b11a9906485c4bbb58ac53 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in franciscosouza (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3d825ceb7b84621861c63bc3e8fe67c329c4510d9516113af595a1e8e6b042dc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-128357 Malicious code in lutfi-esdoger93-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f24e1429522bd3a9f2b983235b72f3386823c7d3914293cee029ac8834a11395 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in advisory_barnacle_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aa2fecdc1c338a99b988cd5a18790290edb36f78685837e44f77ce1184f6a176 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in irma-wajit24-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2aa13fbce501219ea1f699cfcf88b8e13a628ba629abeaa2124a9229874792f4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in joni-tiwul41-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 474d9848fc12ac3b6479ea783bb1cc25eb52350a4baa0fac6ee0de06ab20faf3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-110977 Malicious code in wittering_viper_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2edb049c0d298e7e96b53d0d40eb0834ebd0c96fa98ff12d0661553df0730850 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in exotic_spider_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 70f191dfb43e060b7cd515ab3d0e950c128ca6d55fefe3ab7d69ccd202c24ca4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-94500 Malicious code in fierce_cicada_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c1ccfcc37af04315b5e1544e03d93a18b604354a286224c03db5e3562eff90bf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...