MAL-2025-181650 Malicious code in astam-ift-dabia (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c828370b3808adc65b074676ce6c99cbc485141dd72913d9262a0049a42e4bf7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mahnud-magfu-gomia (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c68bfa20cb9d11f58719fca22f7036149013e4ec272438abf76f0ecf5507111f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in erwin-papeda86-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2505a8f349da17b6e82695c83d596735f8c5d68e60b32549b78954054342e0c2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in primary-indigo-finch (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector edd60a29f0c73ca947c9e2fcd56e1a782cc986289c66f2fba5ee00a941ab4a73 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...