MAL-2025-187149 Malicious code in genomics-run-script-auth-neptune (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 27853c93677fec2a5030fe143a9a6b4d812b32a1ed874a06ed9ea9f4580b5743 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in gocay-gua-visgojfahi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6d492603c4c3c9ded6c5ede7fdb31e617b772433e8f1713acc474c254d7badb7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kuinsu-lukoki-ntabi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 45d2b51bd723391335c18f1224b13c1c878f7e2513df6bec007848dd15ba6021 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in milisa-mioyaayff-muioskfp (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 57f7931a4d896ad2f913131414b569a30618d762781b8fb8f03d110ee978414c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rino-poke21 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 07efbad554bbee7cb8966118c993a5b20a073613f42488b60631a32f2d7c79e1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ida-gulai85-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 323cb3d32ad5f0629a24e77308f5711e957c3ab9720a545a1e3930e95725c88d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in surya-tahutek42-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7a444b7efeebd5b47f7bc59b6c79a1988535caeec4670b673c888686ef86acb5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68622 Malicious code in guilty-beige-camel (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6ae69308a597c1676f4f4a1fb2c4eadcfea25ce30cc0e5b045233814fb29851c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in bambang-telurtahu54-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 32d04390ab14a7b720279ff278aa886691053fcfb36f5be897837654db99d6a8 The package bambang-telurtahu54-ruro was found to contain malicious code. This package appears to be part of the tea.xyz token reward campaign that...