MAL-2025-154103 Malicious code in cinta-70 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d520d33b9e443c826680d3fc161b6e48532301ac0b658723be5435a4b47d94d5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146188 Malicious code in phoebe-wolf-ceres-process (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7ed97b6ad1f4394f2f2fb590260d9b665d49322e8448ea75d7cb49a81d052790 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in retail_shrew_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector acff69fc7391fb514244054dba14c5592c76d883c3353d047da0f77eda0c9369 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in iwan-lutis7-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9338dfde8811f550ddc29caa94bed3f3009a37c03b303dc78899004d2f109fb7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fauzi-esdoger64-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a3e95fc00f697b1e01f92bd92b2790233b675f7931260ffa00a5d980d8a83f71 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in utomo-sambel35-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9b956ee7177e3b09041aed20134280b83ad5ca23e97997d0b535b0f39df89ffa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in subjective-turquoise-ferret (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f09af885d3bffbf8778bc41d2e38b029a37c62295ef69c07b3fb4bbd10806dd2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...