MAL-2025-178269 Malicious code in rintono-poke82 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1c754ab8d531857b665b1a30df29ed1fbcdbfc46ad500d8a646f32b9efee56e8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-159659 Malicious code in manila-ala-makoli (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6aa451cf978253450b0b1da6ac5e46fcf57c702e868dfbc133813e6312d87be8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in umi-gulai50-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3622649930068475cdc39d2782b3f2257c401ec8b69d4f1d8357fe91507d6e87 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in chosen_orangutan-excellentdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 76114e5be17a81cd5e389245a248d6144fb69ab371d0173aa91cdbe956855d07 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-109827 Malicious code in tremendous_sturgeon_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f3aace66ff264098e24870db1a956154c729d66afc46cc7122d268e8bdd1e198 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-108376 Malicious code in sari-nasipecel42-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6102cec4e0574978fc8da7e21a88533c532098cb51bd86fab664c00d9a244a0d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71951 Malicious code in andi-rangginang68-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 95a7993d3e9cf4808839fce6eded917d9891545f13f88fded7c4f75b57052284 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-53750 Malicious code in iwan-brengkes8-sumpek (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 72562e05b1a0ab7da3612d611ce92b5c9b5ccfbcb6b6af655cc61e437042055a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...