MAL-2025-185867 Malicious code in blueshift-standard-altair-higgs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2495eefe689d12164788cd5f8932194479b7babae1155e232d3b3ff8d369fa2a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-179356 Malicious code in unimna-satigoifagof-naioagis (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6eacbe662978dff56871032454ea9faa9b6d20bffc080174c5072beee2946c34 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-160965 Malicious code in muny-boph-reas (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1a97886c94f5abdbfee755707bef4fafae637745c8724d2dd41a1734ea9f99a0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139915 Malicious code in barnard-nova-sass-loader-configstore (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c1b57c9e983fd48309f566dee903920286b373bc535312593f2305034cd2ad64 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in excellent_bobcat_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 00f8ac9e3825654e967949356b25a7b99ad896b94ed3140ad57997e650bbb07a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-72101 Malicious code in bayu-papeda32-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector db7886d6556308245a574bdc3216602cf3b62b495913086e5605c77119b327a3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-73710 Malicious code in joko-kemplang7-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2effabb83f51ee9fa2a01572705d9abe89f43b2781ccea0692a874bf8f36a822 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...