MAL-2025-185564 Malicious code in ariel-xenos-dione-orbit (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector db83500cf3a16dbc3ca0c22ba4bff36c9de611ba6a892a7bc8283db3e81e976e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in indea-fodij-agafba (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 707cd2889a6ff6dc2b6b369711ddb27dfb0a5ba31b374737145d28723293b529 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-121293 Malicious code in kurnia-kembang96-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4816b2fe6d752ce3800d69bef04817c78b1d6a90f077083564f282c753be8139 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-58639 Malicious code in serious_meadowlark_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a73320f5ed399719a519369a511f34ca780b099069edba17aab5fe479d5fd300 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...