MAL-2025-176988 Malicious code in nutravaa-manusia-nutr (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9c71bc072f898a1a0058a9cc8a8d8c1b0ee18e7fb2c00478cba3954f2f64daf9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in amjadridha (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1950f5abbf2d702e009acb837b242d293edcd53e261135ff411dcff5f867b852 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ariel-build-octans-cors (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 67b0a98d3a3ba455a53d80b80682430befd058e5be89086e648c677c3fd72324 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143959 Malicious code in jovian-rollup-plugin-jest-polaris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5f53370f26cf3478ba29cfe3709afd2de86c87b49aacc771a6ad02106cda567c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-130812 Malicious code in umi-kembang81-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 099a46d52b81371927eeae9544be0fe18f07fc79ca65758c1550edb7728e9fbc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-109044 Malicious code in spotty_roundworm_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fb8dca07dd0387f500e8254755a997b0c4d9f506c243ae47d71015c9a75d5b5b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-96077 Malicious code in protective_silverfish_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ec9c912dff3e1a6c2328c645e07b83c4b57a812ced4bf8dd384f79ee26b536f2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-75120 Malicious code in qori-taiwan42-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 31374d58a46ef4011f9c7cee10b040c3c7d42d6f4cd33a64bb07552ed3663974 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in relaxed-amaranth-thrush (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 16883d0aff72d352c9086fe2111e7a7a9ad6d17b93d3d70f1902e6bc31cc6237 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...