MAL-2025-188584 Malicious code in passport-wasat-javascript-link (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ee1995b86a42719390fb786ee154c612d1535a6ce9c7c97401e18f9ec57b8367 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-184035 Malicious code in mitoko-ontcami-lamokoina (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 745f4f8e0841b9ece9530aca36763c3c2d14433705b2cfdfc02dffeaea0b8fc6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-176477 Malicious code in nokire-nakaocil21 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 65a1687af3e543d17faa954e230a96768b5d6f14e0c6f5696d958dc9b3670120 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140984 Malicious code in commitlint-fetch-quark-react-bootstrap (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0b3e4a30c69607b6f0cadd046feb617795bf04607cc2b4dcfb78083360c2a8ba This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-106820 Malicious code in other_ostrich_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d761e7e006d756516fab76c55a882f53bf03c5251643f24e9d15cb9418943738 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-80160 Malicious code in nana-botok70-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 381a994b39ab02f2a7844e0039870bdb5a723b651b5f181745b221f6c21110bf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in vera-bubur85-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e0ff1844c7472b68aed72a941c563b9211a049865fc36a16315e8de0a0e34cd5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in right-azure-alligator (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3be072e2cbe29f81058ff0769be1d5e4efdd9e1bbc5f040e5c8528b9fac375bc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-61253 Malicious code in selfish_opossum_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 42133f9f15ef9b37030d29acacc765c7185a4b745e201692c412fa4424662a05 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...