MAL-2025-170096 Malicious code in upa-lubalauvalio-ilualsgdsu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f040e6ffc120acfcaa7e1e89f04f81732ad7db467a8ed8b05a03c7ddbc07a18e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-151089 Malicious code in abang-poke40 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 87ef3d1f0de92ef5cc1be8ec7a1e2b7229af5826c8e145c0dfde5035802d030f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-99551 Malicious code in arif-gorengan38-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a4f740b1bf8deccbb95040f7dc7608c39650ab13e62ddfedf7f60a26b78d6e73 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-97782 Malicious code in fadhil-menjes90-pore (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0d25ddf4475d41ba0fdcdf02c7ca3285d42b0898ea86a953a95f9c5623414d17 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in connietalbots (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cf715c73ae85409bb8ce11e3d5c7f3707df30f8215e3d76f09afb5771e318706 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...