MAL-2025-157686 Malicious code in kuinsnu-lki-kagbdsasodgasdfdgdgdumi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8f8da0576747a56fad39d11a1fee09b2429ba28517a9d87f6e6194e60b368158 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-133039 Malicious code in eko-lupis52-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e2f06a66a4bd6321b03613b56a9e6e7a27cebc28c183fcc639063c5346545513 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-95515 Malicious code in mixed_tahr_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c071d0a3a46647a66ab1aa4b71023744f0b386bfa5d425fc2705c17c8638ae6d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dynamic_giraffe_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6e1e52e51e6ddaa7597454418b8dbc9bf9b28704b4e894839a3ba3295f7572a9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cici-oblok83-wekto (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2c4e26f4fad1198297939c782cf44387e78d9ee5454b55a1bcf51d414e8faf99 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in curly_lungfish_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6d22c3b1680c8dc98d829095a3b0e7d6904fe91601ea60eb55c51d601058e261 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in weekly_spider_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b2af21cb49e87d6e85870f34baa951d984e57ecbd97151ae2b50a0e62f93f22f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...