MAL-2025-180482 Malicious code in teate-thy-sonic-huduz (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d4104508f7d3d71fbaf835d2065938b97603901638594ba20d303020ce92e0a3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-169011 Malicious code in tehah-muioa-adf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 420b5fc479c98ecb06f83864a516226e42cc589824a818ded7fea0c099f2ff57 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-164199 Malicious code in pilka-luniu-kanjika (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9b8746a9b15552bf9bd980f617ebb7a0f4e547d57b55ba6cf9776b228eac5ec0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-104491 Malicious code in jack-teadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 176756f10cbe7ea927483af836e3058ff0e67bba222bb35ef45967deeb19dc65 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-89449 Malicious code in patria-tempe93-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 57641bac26a086572a18c177313eef1a749a83b8c2eb69f7619beed514052616 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-51070 Malicious code in bella-ongol-ongol23-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 41739beb5aafb5cf8aed95d0dd7ee335ea65fea070c1e92b5307bf058c7b66ec The package bella-ongol-ongol23-miaww was found to contain malicious code. This package appears to be part of the tea.xyz token reward campaign that...