MAL-2025-185524 Malicious code in archaeogenetics-csrf-aquarius-perturbation (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f3bf298157c040760bce94b452e888389305beacf18b29f6f82b92ab32890e45 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in namei-mla-anubuiau (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 66c1e5a3e9045352e0d1968537865e6c9d072a268c6948a60cd557ec26e8c506 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-165657 Malicious code in saku-aiu-unianusu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b44133ac47e43aa19a4f25c32e0d8db273175f1fdc1b10e09d947c3347d553dd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in masako-males-nurs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b61c7a02e88985dccb422b986925375aff9a99cb4d55da57ec5331042c0d86ac This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-152131 Malicious code in akabi-aliga-aihabamava (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5fbcc45882b5f7f8f3fd9cd17dfb1cdff3f6173894f500749ab4118a6fb8428c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-115457 Malicious code in lina-lutis100-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 65669d11830a6ed74a8af09146b94ee29a2bd8d96a07a9fe1aa008da4204c1e3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cindy-tomat60-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aa4252f667d75008694e79c70badf571ad9f85e7b7259d3b539003e66a89c026 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rudi-bubur42-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a3fea44a83b4f4e803afaf4001c39e45ed12bc3eb760fc4692c5187e28b7ba66 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...