Malicious code in nokire-nakao3 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2717eb035b89512bf1a1096556e593af08103d260ed3d2578eb6fe42016a739e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kupai-lukta-iga (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a78fc52d87782cd4599234ca1eae1504bf127ab1a8ff0b52b05b387cdef210d1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-157347 Malicious code in kamasada-nutai-kadi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7e43042a54239d584ead8ddbebd97cb833ab78aa2579bbaeeaf858f72de9d567 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150973 Malicious code in @miptaa02/tedgy (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6788a29b56edb84ed502c3bd4b0a863ab28cdbefefd769398556b72798ea0656 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143356 Malicious code in html-webpack-plugin-astro-blitz-procyon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6dd60d4c15ba4743a5534b1eb8ea3d9e85b07a6b0c815b5ad417301435de30ee This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-109449 Malicious code in tall_raccoon_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b9534e70f0025b0906941833862f533079359ce257e4648927646cb5b0266051 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-104428 Malicious code in irwin-teadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 27e9cd5c0c8f8e109edf2568b6360b6e7cc29a92c44c76fae6a6405b35fa4e72 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in wispy_haddock_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4f93e6898d53570123820d6c0c1c35ba94e68e107389cbb3ec3c2c4cfa3d6e59 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-73114 Malicious code in gilang-telur2-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ae9f3c9059b65f2020ed2f3438f1ff1b4ae4caf861ff0f608b53e1f54887a4af This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...