MAL-2025-163853 Malicious code in nudla-ofogiari-agua (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 898ccb3c946abef07be65c17fdde3faaaaafbb05bddf1c9a12faff3ea88e2973 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-160684 Malicious code in modirai-igno-jinanagu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aa6c517b428278f699c2bcb958a8be0aee1edd632116529cde54be6e85041776 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-123078 Malicious code in rudi-sego93-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fe255a4667a08e85680b824183f3f54822235f3d3f07a2b5409b11be30ef708a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-106478 Malicious code in obedient_spider-tool (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8aee542d232e9f5c9d2beb292c437f0a5f7f511e31a2d94a2f00fdecedb101d8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in umi-liwet51-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector caa119b959535e51a7d76fafadb13dfe0f4a866d20dff62147a84406a03d7904 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-81582 Malicious code in tania-mangut26-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 940a9f4be694a654e2e8fbd7dd751216499a106fac9b76826f7a82df055f4b1c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...