MAL-2025-189496 Malicious code in signal-star-benchmark-report-small (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d0673039fa65b37bfe01eddec1af15894215ced0879b993d1568ac9ea76e07d9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-175160 Malicious code in kapvino-soafadi-vnds (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5e34b3c7e5330064fbb8e85f4f6747de492050f0381eb327ac545d8da9f0571c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-171785 Malicious code in rizkipratama (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 95baf5b0e36e933db69dbf7762930398d7c88998f6533c23f055276847a08e54 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ilal-poke66 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 99d962c5bd43e348057fc02a65711efb030a3e80f25d6b9c95d5aed5a7c5ef0a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in gatsby-redis-sirius-halley (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 638c187fc63138815d26c2282ecd2223ddc5228519d789c20da754e12295f9a8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...