MAL-2025-155440 Malicious code in guras-nutra-muntae (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5405c04559158f06436fa36e236ecdf6e2c9091f981dc3e309c8cd07d3363874 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-158612 Malicious code in lookingan-namakiki96 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a26e7d47409b62247d78f793f648d3ee82fe605505106c197be0441d3485d712 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in server-framework-andromeda-aurora (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f1bf77a21aa60073ee5c5f6339fcbd7faac1ac57a81404777827d4cd1dd5a0e5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149551 Malicious code in wolf-jabbah-axios-proxima (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bb514dc69b97db26c0206a29a61c0a101baaab726b1e5cb364a3d76a6c7a51de This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147042 Malicious code in rate-limiter-loop-npm-farout (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 06092420b8957a0da75aae83861ae673c840b2bcfa86993780d030e2509e0261 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-85610 Malicious code in fitri-keripik16-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fb6fac2bd8c0e66437294e5e4bc53804062b26abe887da2c7334f2f3048e8a8d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ok_egret_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4a0e0e9ee0fddf36e30f9cd8133c5e29d1e1f6b6ad5cc8f527ef8508622b095f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in initial-yellow-impala (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ffecbd5eaa570a450f38f5a39399b8722e79d7e63e97095dbfed9adf168eeada This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71081 Malicious code in terrible-maroon-catshark (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 697a9dacf55ba165e543ce6cd1a701e998c30a7c159f329cd8d94b16ff0befbe This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in erwin-bubur26-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a67b405b565e58b80b5dbc35cc562ba24b87049570106c713eab7c26f74e7938 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...