MAL-2025-143460 Malicious code in hydra-uninstall-cli-pyxis (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a8264502c70e8c00058aa29c0e3045603989b2184e7508d6bea60d5a5b6d037f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-128802 Malicious code in naked_vole_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 18602e2ea5f3a9bb43c32923425560916df22a3b4ed0ca93072ca316c32df924 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in vina-rojak100-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2284882a049dcdba8917e2563e28826357093f136e42b737b13907198e8b8319 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-118451 Malicious code in zaki-ragi78-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 13e5ac8d0f2ea933086e9a32520f819c8d7744d9e329a4016bdee8327a0e1c72 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-73415 Malicious code in hendra-tapai97-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aaf52215d66c8c8e7499355d6ca0ddab796631246454482a392b7ef790b33884 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...