MAL-2025-154711 Malicious code in dioalgo-kilp-akbli (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cc91e4aa7e3648230abc2de6870870a84e87d4d3c0c3f6e3b943b1a5ecbfbb77 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in framework-mysql-regulus-element-ui (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4713f90c44e813de6e1ae468be5e23ecf7228066c5cb246888f727377943d601 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in javascript-nconf-ursa-promise (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ec6c388d4d528181105b95e70ffbfcdb98a70dc29eecadcf4e7ffbd9fc7966bf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-122856 Malicious code in responsible_cricket_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 478484ac468c95a4a0a5aa9317c1d4f3067f012e5dd152b982384302b320b2af This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-88531 Malicious code in mulyono-semur28-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 81ac44b9a971284b3724de5aec96226c55eefd33cd8d5877281d9fd027594058 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hanafi-kacang14-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 27b6ba104aace81afda39aabf91a8e1d5bdfec54847dddd90c1d8fab2db92f2d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-82661 Malicious code in zain-dodol82-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0b6500d4e3a7aa5613f063ddcc3903f5395b28753c16b4b04c67a25382a1555f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in vida-dradag13-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 189ac2b1ad9d40d4c4c2f781d32eaf8d5c4f1cffe62244e9d70bdd740861fa30 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...