MAL-2025-186823 Malicious code in error-alpha-sanitize-sanitize-daemon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1c05a938b12a3f015427b82e19d6772e1ff1d896c7088a090df2f14ff244015e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188222 Malicious code in neptune-lacerta-accretion-meteor (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d79e1ddb6667e6731c2582306c0b23f831c629dba94e4bc6165a1b0895384663 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in astam-ifut-dakaioba (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 45b5573713b25e7e3c4a743c81ef1024c0720a5612a8bf4cdac1b5e14ab8d857 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in astia-alaki-malosskiafa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector efe580e776047e96bf7b1bc865741a0c694cd482a8afe41f3f8f858629d6ef14 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in icha-53 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7707abe748297108c7d04f282d77fbd5abd76a15b579e172fb5566bad8e5adc3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ida-mendoan89-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ba562fc69b1c49c27264e15f77a0063b1ad7d71b97ba705087fb7f1e34eea466 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-137916 Malicious code in wati-lapis26-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector da21f2062fa289a97146ba7e0458ab38e8c240435387f54523f950dade4b0394 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cindy-telur59-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 764674adb32c20e03a06ef79e5ddda74fcf4a4f37fa38b02a0cb6f57195fcefe This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-81011 Malicious code in riana-serabi66-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f7993cbcb221c4911f85d1d84fff74254a79bb43a2a743a59dfd1ec585a605d6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...