MAL-2025-182786 Malicious code in indexa-fotadio-agov (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 63ae94c599719c0839f9b96f0eb1d17e900c3c0024ed0a8010e1789629fb5a0c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-184261 Malicious code in modiov-khan-avcafivaivcd (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 023c64acefe995d2f8caa73122bf613bd9105a6a9a34af48c6d3d556042fff8c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-160692 Malicious code in modirai-igno-jinnaguhifag (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 840856f52d78d1517e1e1341574aaa89a6524016c26c5795f16685000421fbd9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143242 Malicious code in helios-vuetify-deneb-nebula (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9018411a1ed02158055570dc48502874efbe84da714416b032412d42a6186f43 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-127802 Malicious code in joni-kembang24-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 77fc3f4ad5874e0bd694b76aff3bd0338c1b7ea8c10537be8832a68af44f7b65 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fixed_panther_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector faffc4c2dc0fe658f5dcae9cd65190aec0c9b4bcff30cfb85f9af7612ca6d3a1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in armed_ocelot_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7a5bc01de0ebc3170d53c490bfa795e82ff73bb7cf8ad08617092368fd19019b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in bare_donkey_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6295ffd3a326e114af8bd5a826aa6d7f930ea18eda7199e0fb84d3cc544b7044 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-97802 Malicious code in fauzi-lapis80-tititugel (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b2e488f663d6be976abf83add56474b2102c1f84562cd03166189c42563da032 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-92925 Malicious code in zaki-sroto45-apidev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 51f33ebf0bd41d095bd6b80f9723d467ad4bb8a6bc8354fe8d22182ad553300a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-52435 Malicious code in tiara-lodeh21-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c2e04b503d278d1302b6f9745c15c8e01340c8b6e633af6122881f6cbdf9fcc7 The package tiara-lodeh21-riris was found to contain malicious code. This package appears to be part of the tea.xyz token reward campaign that floode...