MAL-2025-160344 Malicious code in messi-tedda-tauas (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aa68019ec33d0d49cacc0d267dbf0fe46ca5c97c30b653889ea3000f8d803516 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in webdriver-manager-acamar-publish-express (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d6b96ad5ee90376a01e0b366643303c92ebbfce04bf0dd3baaf1e33fb450d196 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tomi-pisang5-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f2453447ea83ec6e0513e9d5a295700f6bd8cc050aa62eb6f7d7edf6859dd7d3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in indithas-notthedevs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8ad9579f1639c8bf6ecda02c0849bd0fdc2c56b7cb56e84c6607142596a47052 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-62893 Malicious code in fadhil-tapai63-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e4be20d4499b98e6d79158608d4b080ad717bc932e79cf14f454e6ab54f9b754 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sinta-lapis9-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 56e56b5edf5040b15e8b2a5e4a7710e8e34a188467dac8330b8654d5c6475861 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...