Malicious code in anidata-haulid-mubdafl (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b97bca75603afad159abef1d4af487178d01d628a7187d888016e83d78cf7bc3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dotenv-safe-izar-gatsby-dotenv-parse-variables (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7fe616df749940f75685ab4e34b7cab78f5ad935cee6c5c5cc11d3fcfc1d3820 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-112311 Malicious code in skilled_gerbil_tomato-11 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 988a266e2eec9fb17bd8935a811a6184b6eff79504309273ca77095f4fbd04db This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in eko-kripik32-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 20ef44eb524e2f33da9311071b2ad20c71425176ed20ea5508d81f2f6f734f95 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...