Malicious code in tree-notify-fire-resolve-scale (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 58286446bdb6c6f5f5005a6bc809b0344a781e5d24164ab1e56e1fe30e434940 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188934 Malicious code in public-bundle-class-iota-thread (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 03445ba8a939ca18bdd9df7c6eece70c41c352ef40c472e0eb55792092510cd0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in miusafasdagan-nasduat-bis (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dd775a10e3c153091ef078521b8c311b0d427f847cc3e3759bb496b8a8b5d2fd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rina-peyek96-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector eaa40866ce59a1c450ae4cd293804269fe7598cdc9eb4742969cc46e3efc68ac This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sari-miebogor53-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8cdbbb051f424f4dcff4c4bf77cdce46b3f2de93562cc6a0551cd4a0be09c388 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in yanti-rujaksoto39-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 199d3300f5957611c774a013976d215b13e48a506f878ec6402f146ff57a4d09 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in erick-jus80-pore (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d69c975b1f8f1cec28bd0f790997b54f4d7b3a3e8d9ba91ecca190fdb0ad2498 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-84910 Malicious code in eka-rawon95-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 93e6a178087007fab0134ac85abfa47e455fce955b62b076ce8e117228cbae5f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kurnia-menjes36-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 170dc74cb83f33d2026f32b5aadf89d534c9aec6d906acead42f6f4337334534 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68308 Malicious code in feminist-harlequin-lion (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ac13ed9adccc10d3dc9a5581cd5adb71380525342b0cb47f351a22997ef8d335 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in quixotic_kingfisher_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 501057b254c277a0d05cc3a19fcdf2ddcb3132fb54134272e38814159ff0f2a3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-51342 Malicious code in cindy-jengkol40-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3e188e390d19f2f4b8ffd5a0c2e00740784d3772e64a748b7c1612560934184d The package cindy-jengkol40-riris was found to contain malicious code. This package appears to be part of the tea.xyz token reward campaign that...