MAL-2025-184342 Malicious code in modiov-kifni-ufban (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 619a5e9e8df4bf5c66ecc3496a77e7bd050c0323485273bdcd08de09ee71be21 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-166265 Malicious code in sunden-diak-nulama (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 02be0376a448b5235e35ebd06b7809356c71f1df5a0a7464363ecc421469b7d7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-162490 Malicious code in nokire-asaka7 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8161c468f5abc943405a5f0bf16f064926e3c87b5bdcb062f1e4e4c8f697537f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dorado-leda-module-repository (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 473ac230a1d7605a528320678f1622a86249ae3a4271e3a13c1157044eb153a3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dotenv-safe-wezen-loop-restart (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1dfbd1335926adf07b4842df69761df017e389eb233b6ad9b629bb51f25ea4f6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-95627 Malicious code in neighbouring_anteater_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8cd623da0622cc3d132b5be7ce1160bb070848489eb278bab04c32c5aaab340d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-86810 Malicious code in irma-peyek71-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c6d9b51326d8f98ac4abf2abca5d358ffd6ac95693ff9faa0234a039ae97177b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ade-gandul34-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c7fe3d9735d55cb09a8a3dff74f830d46f8783bdc22289c88e2b5ad2f9340892 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ocha-jengkol13-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 426f5957f25d435bb4a7643ca0fee4af150debb33ad05a36759c6b8fd186cf52 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...