MAL-2025-183006 Malicious code in itale-dci-rfsfrgdrget (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 16500d145160e8a515ad7d3a465bcaf4fca3bca1eac2d19ce78adc2a3ae688c4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in auis-lepaod-man (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bff189433bb129458817ec98d5083fe4f197aacfbcab4e211b6c31ee81ad5b66 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in jaja-taiwan29-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dbc8f1c1e734941636494e582e0866ee8d11604806f5f18ea4e1b51a29079e7e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nurul-sroto52-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b3ef12b053ff53005307934e94f2e29ea6f3a394c97253e99eb85058be7ca6c8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in delicate_marlin_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 055f15a8e5bf882060ea62e9ee46ff375d1535feb4a8a49bb48f93e827d3a743 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in crude_echidna_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector abbf0f4dc2d5ca69e09f2a78588c00080a26b0fdf7fe5c8a8084c9d718bf708a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-52676 Malicious code in wati-getas72-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8e3cd37e7bc0539f9a71e8c51193b4f58f8caeb5be0371492a4d6c7ec02e5b06 The package wati-getas72-sluey was found to contain malicious code. This package appears to be part of the tea.xyz token reward campaign that flooded...