MAL-2025-179474 Malicious code in anabuyi-inuzau-ninni (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b7f3db65943dd7113ff1ff6afc9d4448c9913806267cc2c287d7a19618873473 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-179222 Malicious code in tray-iutuzp-terzuspy (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9df9d441457ffe35b215b0bb008cc8ebdd9f394c43f6a5cadc3f6c29e46c2bbe This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nokire-kilua74 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d8e0943c406739326dd70704f629088617e7deda6db7500b0aa3a1747ee3d6e1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-126208 Malicious code in erick-peyek68-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 39750520a8dfc3fd31c052554851eda2654249534826e22189f228bd896bdb1d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in vivid_viper_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 63d40c5e52ebf06af24f18897761a7b616b6aac6a1c7e1a2daec8e9f0a8022bd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rina-tongseng89-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9120300ecd212bffde09bc11985f43c54f7ab127b2abc03ee48c9c10e36ae16c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in uneven-rose-fish (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0f28ee7879619b034ebb4cfbd6a10d8a81a66f5fa7e89dcbae3966c2f27d8c58 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...