MAL-2025-158067 Malicious code in layla-poke79 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 07637e32e4b64069ba7d98b62c9e5a62b0d4a22a1ed0b52da2f607a41332c702 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dagda-magellan-cosmiconfig-forever (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 42085eb6a4d290ae43995ee4eda6a85b47dcbb6ca580e2965afe4b477e91b4ce This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in erwin-lepet42-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 86d4899fa00a70e182a1af61885a03682ddc87c69f8c6c260e0047fcc1f84c8c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cici-rangi36-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 90a0bc1356797f977f1c16a2c18ca204f0aa5cb60750e49bcd9aa661251021d9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mammoth_smelt_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6bcf46f6c497c91f01d669fbba840eb97c43be87118a267cef72b376dbce704e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-55756 Malicious code in delighted_damselfly_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 24b2876b6b60bd16c8f4a85e0927104405ead9f69f89b43f9b7b32b6c4675947 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...