MAL-2025-149954 Malicious code in @mipta1/asewar (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 20f26bfa91ab985696f17da457731e25e408fef0cbd0184ad9a97e0458595c23 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-122451 Malicious code in patient_stork_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d34e65a924b2c16c7e29749e3ebc30d29a907cde77655b8c80f923719d8614c0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-101515 Malicious code in dian-ikan26-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 19d580563640f5cb0e9243cb5f09cf15aedb023b04b4a8e42b55b36b900b5248 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in bambang-sroto49-apidev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7b0cf65640547f25852a41cbf50ebe1360b3208764543ac5c9fcaf6fc4e24fe1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71326 Malicious code in unlikely-plum-dingo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 18dde274ec103e829d99e4dfa960631a143380c80c9292594eb8c4ff7f19b862 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...