MAL-2025-189702 Malicious code in stub-emulate-decompress-view-sandbox (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3014404892613825d603f59e7f5acebc98b397d1e96068233852a6fa05f78311 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in augis-pod9r-munafpipoa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 709615b810990a5d5ac1299d8358c9c4ccec0a283cccaeea5246b25968bfd37b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tania-kupang25-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector deca1689e760ca5139d4952745ee88ce57a60c00106aed9ed4675cde68c2e9e6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-51966 Malicious code in gilang-lodeh84-apidev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6a6737ac395e94b95bd15996f032ba2163efc5688fa3592fc3181de2fd43b30b The package gilang-lodeh84-apidev was found to contain malicious code. This package appears to be part of the tea.xyz token reward campaign that...