MAL-2025-161237 Malicious code in nabila-poke39 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d59949fd2a3ded355ed70935d71d06a7345dc3953c087d2b14e504b424bee5f3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-160047 Malicious code in manurung-poke28 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f9b3ac67d518896a6f035446901b028c043bc6a600c86a59f51dfedfd28683c7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dotenv-docusaurus-telesto-command (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 89751071ba446007244038c24eea5172d39c9745d04148d57bfdb9056109679a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tania-ketoprak84-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ae15e7f7bda5d33ff46c589aba1e241476847a7f379e3f743854a28b778259c2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-101853 Malicious code in early_manatee_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 03999ae40b0ddabcaf3668546fd8df8dc93e07aac97c654372b74ea79798bb4e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-102641 Malicious code in fauzi-serimuka79-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b26b9a28e96024fd764ee71d904d5195a0b615de8c75b3fc2bc02d765457c475 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-85967 Malicious code in gita-kue81-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8861bb8aa8ed9ebacb3a05664b814d0947c63087d9d11905d2846750845ab5dd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-85602 Malicious code in fitri-jamblang68-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 31236f161249e9bee40eca60727cc22e4416eb442157aa6d6dd9630acc187923 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...