MAL-2025-181318 Malicious code in @akunsansan0/kopi3 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 838b2fe61149882e9b2742be60f115634d6ae7fcf17bf26f5e8bd634bafc06b6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tealove-okta25 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 972aa65b4c2bdfe9627df5ad72a4819e8dfb10160d831e4fb9f2a2f0543343e8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-155852 Malicious code in ibanu-otabauai-umaibtu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 218d23a59c005a0b2480e827eefe51388194d9f9ba706f0b12314ded66f12bff This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-136027 Malicious code in okay_bass_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 70cf060af20dc508cd1f4f33a1f3175e3de699f681e91324c7578f06b7825f2f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-138268 Malicious code in yanti-nasisayur82-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c52f37ee6eefdcfaab101f258c7d8621f3cf0c3bd44574ddd2bcaa07fc81969d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-133239 Malicious code in erwin-taiwan8-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e3ad61aef222f52fe34662b6c2cbf91ff2b578b80445eb0771566b32647724ec This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-100747 Malicious code in comparative_leech_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ab00de346192be52607eac780fc82b5aedd68e43450e44b8e31af1edf23faa3b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in andi-jus87-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 96c3c6ffc5c90d90a377a9392f5192e74b83cb10bb396d848ba738eb5bf67ccf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...