MAL-2025-190170 Malicious code in visualize-cache-web-float-slow (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b3f7f24dadcead52f45d3b13c1e58579d94e0015bb0a26dfefe06ac153a45caa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kastra-perseus-comet-deimos (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ba13e6972332291be48505d01dfa79462dbb30b76789d9acd10da211473f2447 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fadila-poke81 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9ddf2562c5f7b00f0bfb540192c684d668aeb28b236b35ba7084c6272bd33b75 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nabuf-otoimn-igofoggi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b420a3513bbb4ba4ff08aa7765be4b4230cb0d13bf6a5f5256c0e1bf3617592e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-151962 Malicious code in aibopuna-mobile-araoiponabi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6d085c0925ba4604187fab11531644b9cb0c97c24255edfefe8f39e4428f34f6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-82912 Malicious code in ade-lutis86-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 96b76a057b3099ad66a5d9984d7dc63cd5e747122f8cee99d97404eaadf4df30 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...