Malicious code in inda-foi-gisagan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6585bfcfd782529ce29e23ab33fd1976808031f2b1245463c95e3f032f29b45f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-158053 Malicious code in layla-poke66 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector af1339f08ec0ce58c4023193c1ec1d2a59e02cd5e5af5954b10b37b627d59edd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in joko-bakso42-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e38fff59a52f16625f42161a43e2b8c4ab72a7577f35161985f1861ced2c503a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in informal_alligator_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f074a04aac36a66fc4d9fded343e5e2f50c0fd0da92507bfba73b945d88631b5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in arif-tongseng13-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9a997d6f2192a12648c37e8018a7f9a982d3c18428d5e485b84b129a245460f4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in digital_fox_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 47569a1cad783a8b706301780052b462ce4c73635f9e25e5a1267bd2f7d10636 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70887 Malicious code in striped-crimson-warbler (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d6ae444c2fac9c2046434cc321c9515c514f9da37a17a74bc02a5646994bd898 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...