MAL-2025-169274 Malicious code in trevora-cir76 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6d29d86f08b7254f70773cad2e9d8bbe69e939f59c9da85758acb61ee264e5a9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-168580 Malicious code in tealove-nokire50 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7bebdfce55e39180d3958c00f2e7d31f94b19e3a25af8d613cc525482b915ead This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146783 Malicious code in publish-ganymede-cosmiconfig-xerxes (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e8346c1476dda7d46c13bc79d119a9eb3a5dcecbdfabfa1d013f4c6ca36e55b7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in splendid_caribou_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 57c81fd21b6049757b2f46bc24e4b8abcd0bc01eec4ae53f0dc5d0cc6ddfe5ae This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rapid_ermine_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ce143d313c988768ca4fe1ca88549c01d6be6aa044cf08e0ce5de055aa9f10cc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-106656 Malicious code in okta-sego67-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 485a236aaba8128c2da92603b75e527379b0fb9ce1c91426bf3586365c86f3d8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-106141 Malicious code in nana-asinan63-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 11924574860363133930378550bc46bd3ef486f951e46aa46403b7d9ea2a4ecc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-97781 Malicious code in fadhil-mendut72-tititugel (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d68c0dd7fc87c5bbcaa51a3acb3cff190430047edfbafd4292ae954ffd795d61 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in bella-empal6-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 01a88ba8dde9c9e5a87bed948d518a4a79e67e06abbc650c9b12e365e60ca310 The package bella-empal6-miaww was found to contain malicious code. This package appears to be part of the tea.xyz token reward campaign that flooded...

Malicious code in cindy-tahu58-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0ac5278198591f4be747344bffd965bbd6adc610f2b3ade6915ec0e8cfacc20e The package cindy-tahu58-riris was found to contain malicious code. This package appears to be part of the tea.xyz token reward campaign that flooded...