MAL-2025-189154 Malicious code in relay-dotenv-chai-ophiuchus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 135aac248520c4091ba591b4d2d36a84f16d5f524805d7e46429c91cd4936504 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in gociy-ng-ugu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7b2b190442dfab4015dbf4cc7e91dd90fb4510df45b1afafc37462b2418e84d7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lookingan-jeje26 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2056597b12c003be37ff0db873b94f99b4a97ea083de401dec879f87b1d7fd77 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-166700 Malicious code in tea-osss-tean (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f3a9fb9f79dc13935b529b7735a778f415cef0b719f878c09a1a65717d78c9ce This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-130057 Malicious code in sari-sego90-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3b0ff832209a2a293f037ba8b61b5e8a6d865530f4fa7e53dcb14fd0e41739b4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-66583 Malicious code in absolute-black-guan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 607d913ff6bf21a8825746412b98c1a6c971946064f92486990e01762980858a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-66206 Malicious code in xaver-gepuk36-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0293430d3a24d2ae27e8ff2edf1e7d0cd3582c0c193421bd32a71308f983564f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-64063 Malicious code in linear_turkey_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 908d9133669e333772989ed1dacd23341031504bbb1f9d761e8debdf98a20b20 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...