MAL-2025-92366 Malicious code in xaver-kripik12-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 223384f9d417fc5f52cee71c6de684becc3a0c6deab95ea2512c26db6b7e46df This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-92876 Malicious code in zaki-kue97-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 47771428e25f6274e8648c437e709a12bcb8a1c6fd77384f1cf82037a30b1d69 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in unhappy_shrew_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 52ff135f1ded718337bda64669a74967f278f99e508d2eada9c8ae645ed143ec This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-81493 Malicious code in suitable_rabbit_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2f1df03d346c880314fe0d6748696e9cea8bbeaac993463f8f6db1a0df61689f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in citra-sasag50-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3781b76b24ff62829c1f1296ad8f3105b2397af9065be7e7d624453763281fc7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in wati-klanting13-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 36e9f6e3b00ad08548753112a3e8a4532290cddb7e8f018fa02044ee2e0c0a27 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-75826 Malicious code in udin-oncom55-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bd88179c2bb5d20b61021f07b6b7833a351cdf640640bbd989668018593fe974 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in single-blue-pinniped (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 86d830524db344940c9233c32ac1272f7f897963e49d6da3f0b4ef6a7081ec4a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fadhil-ubi90-sumpek (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3064ca41d4c4e2865dc4c3bd46f0054d370cbe379bd3386cf1edec638d1e8726 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-56792 Malicious code in ida-takokak79-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3318a072919cd858b2826e59ca05ff317bd496aa414070fd22c64e552b3cad51 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-53849 Malicious code in ogi-gado-gado67-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b94d5828545f462b005c704b929e2bc115597e41a94d5cf0d5df45e6a3fc0a1c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...