MAL-2025-188541 Malicious code in palynology-isostasy-protractor-non-blocking (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3677114d3794d21b85f9a96da8349a3359349ad35b6401c29589feab1f24a9a9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in teate-thy-sonic-hilkun (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b7dc3a2da760e1eb84e65abfeb71c00cf3e756fdb7e5b12697598b2753066d96 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mahnud-nofity-gamoani (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5ce36c79f37a141131c6867522efa38a8419201ebe6f6d32cb3a5e11bf7c9f4f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-153408 Malicious code in avminh-afgais-fodafahog (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ce0b630b45155dd3919aa0bda140d6233137a4afd6b181a8f4e874613dd5b2c0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cors-redis-stop-alphard (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b65e1430ff5f3905e4cbe0ad81e4243e56ae4777ae305b05edf937249950fc4a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in eko-telurtahu13-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a5626d1206c2b87425639a8b0a72c50d0974dc9a284144626f8e3112b3f0e64e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-92701 Malicious code in yuni-kolak54-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 586ccf55d9b0abc360965b3cb0ab1a76c4c0c730de9971f901481be6062f3ff1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-86318 Malicious code in hanafi-mieayam23-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e79a2a7b7a012671a3867dc4268150a50c5c015cdab45846bb22a91b3c66d255 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...