MAL-2025-187445 Malicious code in impulse-holography-grunt-sequelize (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c9c28c8183009a08a11188523afcf95bf4a90b317d6e72e29db3fb3800beef2b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-169676 Malicious code in ucok-poke54 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 48239d5501ccd47874a4d9b21adac67494c96d2e4fb7bbb3a3353f2eb37b4fb3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-135772 Malicious code in naughty_rodent_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2502a08c5436193797febc86b23bebc410117c3997167e5e11128ff97e8bfa76 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-126710 Malicious code in galih-tahu64-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a44ca0337bf079b4a3bedfcfcbc1c9785842d3b04dee8dc433d7adc8627407b2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in bambang-rawon17-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 29f02c1f3e0edd04f188c526bacb0d1bb26cd4681301a374fcdb4eba3af7c6c4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-79272 Malicious code in joko-telur25-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b08fe431720eb208222e158132320883a7035fc52257fcebe6341376239cab89 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...