MAL-2025-188502 Malicious code in paleobotany-perseus-draco-mensa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7e95a9252255738e39fa00227391b21d62088949c92c1eaa51e5d55ca244ad53 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in masolv-avilo-civbufoiv (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7973048e94f8e26bc0685d9c60d5f668e8580705029358fbcfe94edc72c9a994 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in goodafin-nuig-gibafgita (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 53289ba2762c97469eade866df447fee2d8175265a46155594fcf2e29bd654b2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-153546 Malicious code in avomainah-frasu-ofrau (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 569bbc6bf12fa10fa1bb519a52f0b3f06711ef82d821fa293bdf2a56a80bbc5e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mulyono-tahutek52-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 564323ab4a9ad5d1029c150d5570fcfc223c3ddeea69f65b2940f6964854b35b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-122687 Malicious code in putri-menjes100-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5a28b98fdabc6644b50d1bd4dd06f0ddeee8a9c440125aeaa70677b8daabd954 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-113339 Malicious code in dewi-bakwan69-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b80b3297227e85794006124b08a60a9e6645510125eee2e7ebb03a8fbadbb3ff This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rifqi-dodol13-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1ad1fc100ab7c163f7db757cf8bf1c38c4c8a1dac04bc2deebd79ab2ed8b0820 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...