Malicious code in ganymede-metabolomics-cryptography-metalsmith (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6be32f11163bc54d3aeb742db539967f72078db69bd2365ca559d641cc92a721 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-166146 Malicious code in suharta-poke2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1441531a0e40b0b913e992c59ee4ddf00083275d0017342221b01eaddbebfe6c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143930 Malicious code in jest-pegasus-nightwatch-blaze (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 80191c082be44691a67ad5ff841fed6a08ac9ffa96a49ed27afc0eb1c8dc50eb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cici-peyek100-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ffc0cb08c78acddde87356280435333eb094b63c1d623c1d77b112a03c033c52 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in upper_bobolink_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 795caab7543582f8633b47e154140f83bd4be654b18f32727163a04e2c70308d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in yawning_meerkat_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 539200c6519c58701e632187fc593d5766e881c89fca09c578fd45392185f676 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-58217 Malicious code in putra-lupis70-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4e23efeacca5335bd68d6dfef8e174273f5ff3f4617fb062a40f4c8cd0618945 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-56350 Malicious code in fitri-mie5-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f41e6494f5f7577774f1ecd8870cbdb15f53837322a38e4532d095b1e4d5d75d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...