MAL-2025-162894 Malicious code in nokire-loklok40 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 666ab270b484e3fae153648ac5417f28a1ef7dabce23c3304132305f1ce33bf0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in umi-serimuka36-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ff7475970736996e33922be15d0f0b71f03d557b26703097ac158f1d66e788b1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-91022 Malicious code in thorough_tyrannosaurus_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e4152ca6cb6a7a36fbf64ec3908768707edfdaf8fc23a10db98c4f68afc60659 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in equal-chocolate-jaguar (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ff3e0664cb0930af4c469e773a480d937b576f02d3217330bf074b3e13314b6e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...