MAL-2025-178172 Malicious code in rindaman-poke12 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f73cbeaeccbef84b8a1c93604dbef5eb7d00ba1acb4c73a7af9bf2f97d3c2706 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147613 Malicious code in sagitta-quark-browserify-ariel (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0dd0e447d1df55cb8dfc1d3a02be155fb47b264e13fa88878c6fc14b5d2ecbde This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in riana-miebogor71-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ac05118ae9b1c7251619f8d73ee2815f26214c03b6e12f2078a6063c83aa9596 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in putra-gaplek9-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1591d1dfa1b120cd625f5c63e09195ddb5eb6c27697b80dcf616f0d05f6a015d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in okta-lupis92-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1b6e46cbd7193b2403c77faf5e953f7ce63e22f3886a5bf5a36a9e934eb626bf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-56709 Malicious code in helpful_guineafowl_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ac3a4c065990a2e92fb77f6e48dd125ce3fea831a12bf38d9a496900b605699a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...