Malicious code in archaeometry-rollup-plugin-astro-install (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1dcfdaa9a4222852d826a3e0212b6a3584a79729124a8ff9ee1178222bb3de18 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-185459 Malicious code in antares-airbnb-cryonics-ionosphere (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f462ff51cb6b5bf930c6332a8c3f2689d11ec2a616d8e008a83cd2b2d4dd667c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-181092 Malicious code in teate-thy-sonic-werduw (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a9eaf25423193252f213ace05a1e99366ce435ba30ed93b6bb4e5a6430faec1a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in technical-albio-tolanban (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 912b972232ae107fcd9acdc2540103e2ee7f18344ae69588ea9976d5fc0d57b0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in yuni-telurtahu3-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d1f9402fd242e1e3294a8d70a8299c2feadc9ab092217f4be9acb4213ff64bf8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rina-kembang49-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2e389a99569583ccc27b09ea4dc363479c851727d71424f8d3ce86b20d591bd9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-59606 Malicious code in yanti-getuk9-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 92050d448a2615307c02ea793bb68758eb1acf71a3adca5f43a3b46ccd621d65 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...