MAL-2025-183790 Malicious code in masolv-avilo-civbu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 68f03d3a93ae2c598885dd37363241a88a780dd0b7a3bcf86bdcd9b364bbdc74 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @mipta1/asewar (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 20f26bfa91ab985696f17da457731e25e408fef0cbd0184ad9a97e0458595c23 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-161937 Malicious code in nasrul-poke47 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9d3f4c2f173f1d7b9da9fdf9cbf6241cbc322cf1a0ba167dafb4401c3997bb55 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ogi-oblok4-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1b65d704d3e3f26efafd054a5964d1cc6e50114b273dfc2a44af0ef29d25b850 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in forward_mongoose_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 736642707097ffc7603d3916d6222dfb9d98ef4515b08b74651714e0081348fd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-114109 Malicious code in galih-botok43-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b79457b0e489afa515a905687d64b96a4a6a0290ad13dc5b60386d49b86a282e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-64895 Malicious code in putri-kembang87-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9f3087e1ab9de44e10c4c4e7c5a5740b6cea74056d59719f07c42cd716b96b65 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in erick-saguer54-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0f380e7f994c40de7c1108cc9a74e320556d7e6e1e15d42c2412e186c2b3c113 The package erick-saguer54-riris was found to contain malicious code. This package appears to be part of the tea.xyz token reward campaign that flood...

MAL-2025-50186 Malicious code in dewanto-lepet37-crottsekebon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c3c260437fdd66a56cc0024a37f96b55c30f715ab7b1b55b8949aa2468e0568f The package dewanto-lepet37-crottsekebon was found to contain malicious code. This package appears to be part of the tea.xyz token reward campaign th...

MAL-2025-50254 Malicious code in dono-getuk1-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 98667e6b0867973d3e6a6bbc1d9bb9b3d23eb77587e3d42c82297d549da38749 The package dono-getuk1-ruro was found to contain malicious code. This package appears to be part of the tea.xyz token reward campaign that flooded n...