Malicious code in global-schema-unuk-gemini (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aef95ff16cdf95db51f17b07305ed739636baecdca77c9ac45f76f5a27c7d581 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in roti37 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2019bbf1e7b6c2b854fd035e196ee689e6ec7c36178b2bf8e0774563fe1c807d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in verts-otimmo-ffigagpgafog (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 37af971a29cc9cd531bea9378f3982a5f10eb7fbc394526a47722fe2cd5f97b3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-161803 Malicious code in namae-nadugsua-napuyo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 58fa1b988b9e21c16e2dd507bb77cbf5d9d7b6ef134c5b3bdf9c439a34a4ec24 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in arif-poke75 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b889a0d2105ad2225b5583469750198a2605b467e2e554c5b18d4ad616be2b2f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-164742 Malicious code in rino-poke91 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1742935faa6b3dadc6d35b5d05524d854947509c1bebbdf41d261124601743d2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in maman-jamblang2-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0eee5881de9a5059dba2d2d2fd6373fd02106c3de14fd9d184c6738f5985926c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nina-nasiuduk24-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 989e4f32bd1b67f22f4260203e79b7b82a47836003477bdddd1a5263f2157c0f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-117948 Malicious code in wasteful_roundworm_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9a699c32d1901da216eb5d8283df01df8be2dc09dcf8ef5b4fc04e869f34796b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in detailed_giraffe-silentdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 662ea74f8ebf827fb9e8c8203f1f12475f4baf9e1568a4c5baf225ec8c3dfea2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in worldwide_ferret_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 737abab82535a21b1f9e15db2e33795483ccc40818074969cb1a80b7303ea554 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in laila-bubur60-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d243efde803b88371633815420712162091b0a7b06bf152027e5b6adc3ecbeb5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lisa-bika34-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4fbf653ee6316c4480fa2da7df05fe28df345a67c363c9f6e6a4b1bb4c48bb0e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...