MAL-2025-182145 Malicious code in gociay-uinaga-ugu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3b60fd7ef19b7ad19a499b6f31e5c6d303e8a579274c473324ef7d3ac0ba8d28 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in akabia-aligma-agbva (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bf30789041c452c967ff6f4e1207759bd0c58793d8e46237464b5bbbe3ec9853 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in changelog-upgrade-native-phoebe (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d985c3ae2349fb80095178ca8c1c3d0e0171ce3f14382f0bb8265bbfd705918e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-135484 Malicious code in marginal_ox_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2012a44e1762a7fb4d0937e2832db8e36c7e56c7bfa742f0376cee090dad7f26 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in joko-nasipecel95-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 50437c9a2c378e2dca045c4821ef4fbf0486c98f02b5cfb143c55abcd9adf301 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in indirect-aqua-planarian (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1d98bfd6fa87fa82c8fd3ecd24f28c9c5d0b9d495129e869cfdfd7b5a4063ced This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...