MAL-2025-171652 Malicious code in niamhbyrne (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector af1d7fc31e45b15da92d34a58f1f096fa1c3789a404e0418fdcb38949180ea5b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-159992 Malicious code in manuffak-angabofi-guna (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 51800f4e3b73ffa501a0eefe18f62eb28c68d6426dabdde3031090d9aa15ab35 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-138615 Malicious code in coastal-magenta-krill (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 235590e89046dd3066abdb46bd9511d593bddd04b1569cfaba1c03bed17bfd1f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in whispering_llama_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f6ac0277da6e009a47e66d387c6a8ea22169d57b7f2d7af03c020fd8860c342e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-131277 Malicious code in wawan-soto86-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 906de89c42b175959796e89b119aed1a7ad5ad7bb98fa3de105b8ce1463bf246 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-122902 Malicious code in riana-nasi17-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 991b5dcd2fa228bdbe7cddbffa446544d000346e89ecf0140ae1b14075c25e88 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in redundant_sheep_azure-94 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b943913fc09e154f06a91c1e356c349630f5e3f9d456f1136f8e885690ada3e9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...