MAL-2025-185735 Malicious code in bad-kappa-spy-fire-error (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9fd357cac25b9b3eb95f0ee24e2f44d4765d6fcd28cc491590ab1b7e043b31da This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in poliaoz-aiksgsdfo-aoan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 18bf154c5946019e6b144b54d55e67c4fed573cad4a4b6d095f49cf1a3b2d722 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nina-gembus11-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e891da97aacb09e895639afc1efb0cc7ddbc6eb901a8310f7e28671b3f8ea9df This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-123999 Malicious code in vida-botok15-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a8cf62b283fcd72bb66c0a5e62bc627b259250bc3b8ba7c4093e62567d6b45a7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fat_roundworm_dumbs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b0053d521be733b2b6e29f8cc32d936a0a2c0bc1d940ff22b2c571931d5c98e5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ogi-miemee82-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f979f4eb153fd249042ea19fa70f529239d7fbf57c3e402d90261a781e20cdbc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...