MAL-2025-181193 Malicious code in @akunsansan0/biru (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9a64fb5f661323031fad639dddf6c4b1de8106a80455c7b4c387ed600e053ffd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-172885 Malicious code in ananda-poke5 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fd6572fccdcfc4051e4fc9f0a9f27859225b9f3e7787518d50c91f5d5961f5f4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-178042 Malicious code in polymer-idagfa-ratafavadaf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 04f55e5fea34829863338ddd769c8ed08307237054ec6478e0a37debfa8fe6d8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in patria-ketoprak99-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector baf1c55a8ec9e432405a1625d650675b8a4c750d6242bff09f4b3275aeae7148 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fast_minnow_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0cc0007fe045e0a856c9454043663fc5df661d80106c499683194ea886636673 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dewanto-takokak82-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b5d9d3287f8822eb0928b6f94121ea3a25344186f4dc325c13eff58a52f5eaab This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kurniawan-gepuk98-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 11bade1e892204729974631bf2470d99d8d23b575ae0f999f5409e139f345dbc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...