MAL-2025-171492 Malicious code in leecsa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 10e6ae65dd31a686cfb0fb2e85b3e45a655b59e01241d2f23f19f2aef3a99917 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tania-bika49-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5837c7bc94e3824ee5d87e7afc63984550a9c7e3bd8c172e861b1167e6f7f896 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-136642 Malicious code in rifqi-kue70-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a43b2c994252b38eec75b9f5cf288e8ef3a697a4fd4cf299c8cbc5cb7c86f091 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tania-kue94-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7a02044894ec841e16736eec94c2dd035140de07b0b701220210f0dcc82919bf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-76071 Malicious code in vina-lepet76-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 19e142f6f4bc6b1bbe7357240412648b128c4f26dd2dc06a53a87135bc1af38d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in direct-aqua-beetle (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 226b422317ce0cebbebe29a8b64dee113a5d4ed8f6172cbfa31751f75b8eea17 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...