MAL-2025-184354 Malicious code in modiov-kihan-afibanaivihid (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9dcae0368e3c64e35ec033cae00cf5ed98d1a5da4bbf3e39b9f1fa1ce277c328 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-181823 Malicious code in avangs-olims-nolnu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c6df6bd416530bc5f3969bc4fb9b432a4b670f5a4c0768ba514001808a617033 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lookingan-nalako49 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector becc161ed93b8336d000321add1b0b42ff2dd0dc6be6b53c4bc829ed0765c4fd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nadia-tapai19-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a02356195f3840d0833076fb4f9be6b0651171190fcfd24c87de007e3144db07 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-121069 Malicious code in joko-ketan89-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0c6e35788bf95ec924089ffdf20d4cdaf5a0a85cf36b4a78520c31305d620dae This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nina-kentang22-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 16a075b6c4ed7ba884e951a89baf1106dccbad30e65b23903a0bc41f24150d7e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70733 Malicious code in southern-brown-pigeon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ce330f9d75ca66bd635afd62b64f2f94d82c38edd77f72930ed65e4db42d4e9d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-54616 Malicious code in rifqi-ketan12-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector afa76c6ff6592e5752efb41186f3145e8f65313fb07381e4f27fad85471d08dd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in joni-menjes87-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4af6d18683b530fcf8e1d81b885b8c3e8a5d5a3f423c86042c11c3421ec519ed This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-53278 Malicious code in lutfi-nasipecel24-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 31200a05653ce5f0600120b83361ddd8744dc735cd8b7614ae7de0ce32380a4f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...