MAL-2025-172232 Malicious code in augis-podr-guledifd (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cd2d574ae2a647a7e399b1b74e6cb045770a9991f64493b189e17c50d1e335a5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dear_caterpillar_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 78d5cdf7872e4c945aaa9470ed805280828c3ba0af081c6d4abb7599e4ebcca2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-131773 Malicious code in zaki-oncom2-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7a5d3e5e506c9cefbff76adfc896ff271f2a43d0263988a67ccbfdb2c0336e20 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kurnia-miebogor16-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f9a018be283f593cc25e3075820844a99549f91531af86adab89588b372ebc19 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in weak_leopard_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bf5e0663da73777752ac0e1787712f81ab14cb7806528a80c45b9721da69794c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fitri-otak-otak62-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ed789de156d4bdb516c2607c7f25ab39cebe060d41978178a1c8877dbd08f981 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-66836 Malicious code in armed-lime-silverfish (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d709119c5f8c071962f3c0eaa46c66bc3084b6511f49ed9ccf956bc7fb1160b5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...