MAL-2025-116123 Malicious code in objective_muskox_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ac727489d35b84465b72bb5d9cdbb98f1f1a61d28e93941346627a1f52796a87 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-93451 Malicious code in burning_bear_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f77da1f7b03aab1e28e6e27046651e34cd7359e7300e182cfee11c8c9fa4aed5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in vina-gaplek48-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ab55fabffc6328df3441523d38fde53d9f10f9f2d119ea27134d21a21d3d90a9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-91738 Malicious code in vera-tahu76-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 42ff24680f90893618f867411b4d81dc5547720da12fe4374ee1c5da042dbae5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tuti-sasag60-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7f8cfe78e65c3d0bb3b3ee1572dd610053a0a2c151fbc1260227d2e026de5e37 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...