MAL-2025-183583 Malicious code in lomi-fus-ugaiaubfolfi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 002f893549d8e85f2f444ee9443992fc094ff4543de958e72183b419a170cfca This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148458 Malicious code in taurus-antares-child-process-commitlint-config-angular (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4fe0fc485095fad750a070495da9a88aa78c72c33bcffa9c5000b8fd69e760da This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-117339 Malicious code in tania-kemplang3-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 308d3e0061f01019c85d69ccecd281145735e024b0b3425c0cf92f1548ceb12b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-87328 Malicious code in kiki-kue89-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3cf63452f4bcd93165e4d1e8b6849392758e43ccc4e00b9b5749563213c9cae3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-66712 Malicious code in agreed-coral-condor (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ef426eed46a2af7ce87be9dc93999ca42439d83e87e1b9fa9f87b4446b542b02 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-66924 Malicious code in balanced-rose-crow (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8d074f08c885d9b49e7ebd7a298cee46c28825eba28940ba3b4f861e8fd47aff This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...