MAL-2025-179890 Malicious code in lookingan-jeje2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ff8c132cde42647f289c34bcb8fed8cab1f1befce1696dd4e6a80e6c197b3ef1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in joko-buburayam11-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e6267ecdac4e952c2f570cbbfede3ccc9f66351abdd6616c133e3ac8e911a1e0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-120046 Malicious code in filthy_hornet_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 965f8bb999bac2653a213d61ab9a345e447fcd85506182490df923a7c4530bba This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-106579 Malicious code in ogi-mangga89-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 78c821217f4697f7547f5f0560bc7cd0f208da33ffac109b7f466428194f809d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-96320 Malicious code in resonant_kingfisher_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aca5f82f263ef5fefa17b001a80a8210fb237aa757956400202e6e846fac6b43 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in indah-sasag63-kyuki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4b4b132cda6ecc85d441477ffd6d64c769e1b5b016fa5e9692e16a4641d0d1bb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-57946 Malicious code in ocha-rawon96-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a66dbb11713d910dfbd903faf2e953f0fc0d9ca854219ac0c80cc1949820055e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...