MAL-2025-188958 Malicious code in publish-superagent-rollup-plugin-commitlint (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5549aa2809a51a1689820cd3b387c36f2d9dc197d3cb4f92ae2654b6b95a323d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in zaki-lumpur33-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 16ff38c554489e0012def96f1b1e25bf1bc2a60a67ab40e64fbf991126dd505a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-125936 Malicious code in dono-lepet34-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7f8d14bf3e559a798f1fd2ce956a77dfe9b023ffae46344af3554157310b356f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-119761 Malicious code in erick-jengkol76-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7d2def1d372e60ef95ad2f9befbb02791bde3ce37cbe988a54b07abd7cc0fe0e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in okta-gudeg7-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 124091c746d3264e24f8086954bfa2bda32102ef010a70cf0dc9557946f6826e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...