MAL-2025-182479 Malicious code in imodiov-kugfi-comolai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f14d981e3bf0c01664a1f1ebcb70106b6d63d126937160d1725977cb8eec61ef This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in avminah-fagis-iganmafyo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0da54c0a3a47d4621edb3b1e8a46d5e2a706078c86ae8f98306448c8192eb1b9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-165899 Malicious code in shilang-poke77 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 695921df7aafa6e3f8617204c29e5c95e4ab67e79c908c8a2746fe36322be947 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in jaja-rawon74-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 37a385400a38e999e154344bc312cc925ddf7fb8f98c2226557b61309eafa663 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sinta-naget11-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e4a2ab2ac9d23723bef4511427f09f3072991510c48c07d233a04fdf0598a682 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-115955 Malicious code in nana-mendoan56-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4528c85700257623a00fc1e32a6578f0f5e27cbf3978429b0d42d8f6e1b4ae34 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-99171 Malicious code in ade-toge98-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 623de3b328e3babac555a3f3c87236ce861623acc89e804373d9331d1ebf6220 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-97844 Malicious code in gilang-lapis57-tititugel (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c3ed5d13b16792254ef135637b92a45111153c2bbbae535e13a0314a6d4c32a0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in joko-kue29-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 546f4656d17df3d46d8a616bd643b2fca0f59f222fc5a81c5f9be98b057204db This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-80778 Malicious code in putri-kupang92-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bc255d704cc8d3bbe2d46ad48a89b5123f1a1425df2840bf12152d577e087821 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in oktafian-martabak46-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4cd3d1acb7ee232e8929600b85587cf4e7563e46bc76a2dda81fd7ab70b7c0a8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...