MAL-2025-183717 Malicious code in manu-oib-givakisassuisois (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2b6bd5bbde0113cf42fb9268e6ff879734ebc4e9da3b086a1e75f9bce486d9ab This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-168319 Malicious code in tealove-lady14 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2e48f058899f6a23670cbdffdcd063fe17763b313bf2e4bfb2c956f35822ee3b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in qori-empal32-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c1f1fab022c62879e2168cd07fa8c5b08c7ce8b6aacfed50f7a44719f8f48ecf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-125560 Malicious code in comfortable_penguin_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 19feb7ecae1371a7e78f449a809d2c6a721e99b5d68e1734bf48f6bc62f47de0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-105021 Malicious code in late_guanaco_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3592625e8b09615e807b9d48c5ff3a0e361913cf9fffa050e810c47c939c3ecb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-91911 Malicious code in vina-lontong54-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c3a15594a8e86af8dfeb5a73b7c98a6d8ec4c35fcb63e4fc60d4d83e56416ec4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...