MAL-2025-178775 Malicious code in tanufahuir-sofai-duguat (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ce3f2baa8cd971a9bdde119735f5c3077e6c0ff6c83253d70b4279f4680e0740 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in icha-96 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1a81e84f35e15ae3eed7e225e4aef7ccbbaa353367e2f19f9e86e9a194ab0d6b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in shilang-poke48 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 306f389547f41ac2277cce8b5172e1905e97fd0d899dd16aed1d97cb7475692c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140020 Malicious code in blaze-equinox-ceres-nightmare (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b8c2805a9e6173d86763438b0da3f4653180b81b634a3827c6a485434b559067 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-98691 Malicious code in dying_snipe_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8e2591be4d528445c520d8571c279b169cff7bbe9ea471971f760a2a1f4902a4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in resonant_scallop_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector acb6c78f01b60373f988ec57f095011d56a3ac81a49442e14073320542a7ae79 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-96052 Malicious code in progressive_barnacle_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 513a8ab1f4b8588da05cd0f86774d93204c991f2f65b7a54a4e18718e2db070f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in wawan-toge26-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 70cf98d9343b03867e6d258a595062e3503482e1ab4222fffe65f011e57af7b8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69472 Malicious code in monetary-blush-mastodon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 92b869fb0ea60941af59b00281984d31dd6c1d8ad9ff4bf6a4832284f8d96189 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...