MAL-2025-144165 Malicious code in kinetic-bunyan-dotenv-safe-quantum (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ed537f4b241212a2b089f240ee57dc89cbad1679d4794a48fcc80d8ad47914fe This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in supreme-coral-mandrill (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e86131409d2aa2ed279d0bc1cfea382880cce3ad9c98a681bae69f9c2f785638 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-134333 Malicious code in indah-tahu29-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 84c482432fd1965ff65269e4a7bfaaeb90021dddc8c4381bfc498ee446a57feb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in faithful_squid_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 82f72338d40bf3cb919aee0833bfe528574ac08552db96ae04db6924e0dcf280 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in indah-ruwet66-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d9908a9c7d17bc6d55e76681e3ff6eb7eb7805effa14fad934fa7b416d08b04e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...