MAL-2025-188883 Malicious code in protected-link-fire-epsilon-await (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ab478b43bda74c0140167d1dc967d77687ba6a6a9836e9a1a25e9125a4a44495 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-185536 Malicious code in archaeometry-eventhoriz-taphonomy-node-sass (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 60c3be56c95cdb3180faf1ff5f1f7ac9b1287134bb4a918d5d585bbae225d4bb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in anak-jalanan-mdn21 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ed3126170a8aa9e880f92586f59e29a2273b1fbfe5806f597e0419e76e5f8313 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in abina-amoavugoi-anuhi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector acf7b1f43cdb9577708b1c79181307e87c1a514e42756d1224a44d3508eb6604 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in apparent_kingfisher_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6a90b8fd965ab83de88d932257441c6ec526c37ec7f0a8561383f742f043408e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cindy-brongkos66-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3f9a866731f933e63f2c30ad0d4fab2dbcf4a961c9340a50d370f0a7290e2afa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...