MAL-2025-190040 Malicious code in umbra-mensa-bunyan-non-blocking (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b7cd34942a4dfac6c4497a53e8b881b509a19d9a829afbb5b395e04cb5424ac8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-179660 Malicious code in kisut-afunig-amfaaicia (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bee1488dfcd416196eca574a5d282417a054861704f1fdcbdad9ab8485ced175 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in siska-sego82-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4037f3e3aa0cc74bc07ebdd7a0904aec11de5f494b87be8d623eeea479fe936f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-102531 Malicious code in fajar-sambel31-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ebaa2deffa705d408e8ba55cef5e85c7ae26d9b448d992ff3d0c8dcf84b38df6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in convincing_chinchilla_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 61e876e5cd072fec41e979d2c6667e6094debb1ec37b374f78c2dc940839dbac This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...