MAL-2025-169258 Malicious code in trevora-cir61 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6b7d62417266edc5eb453df8d43572fd3ce38328794b58d068e607323db45d36 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145120 Malicious code in mongodb-achernar-module-neptune (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 41eae1a1d9e6036f757faac69de61b2bedb3d9d5a5e676a3fa82fb1634b3e068 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143442 Malicious code in hydra-frontend-testcafe-zenith (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e1a9d5ac6a8f78a91341338dcf450760dfae65194d9d62eefb8b885ef7ded353 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dian-mendoan100-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9eb912437a560ca12b4421adbdc32fb6a36dfe998cd1f9745bb70d68e9633380 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-112197 Malicious code in possible_crane_aquamarine-5 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a26bbaee920a59328aa2349da5206b107cbdfef48679df9e37b4c325528a9de3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rina-lapis24-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5a6d951f052f0b01745b35a24529dbd208b57116316c125741bdc8503a3470c9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in vicious_guan_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5d6d03d611a07c59ed42b9e7ab88f71e56bab5d5b0a2215effddae5da8be9075 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...