Malicious code in sonic-kuig-tgaav (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6ef13e89f65ac30f6cc8b9b50e4f0e3cb2194e4243ba5224d1b7fcff01646757 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in teagood-yakuza94 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0aca11e8a2aac040afd25ef06717d6c7051c19321eb693abd44b1445b3c51ce7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in uaragifa-maranefu-safari (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ef3edc9f3d95a8b44ee35eab6e06936d880fc6712c6e10a4eb805b3ce4dc2904 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145522 Malicious code in node-config-upgrade-library-carpo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d5b7436d1c19bd4ada5702cde9f3b4b860ec5e5c962dc062ad80ccd76e1a57e1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in bambang-kripik87-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 398827dc74fb5f8b65b76905c3161dba545f79226a014415daa4eea06435d540 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in wawan-lontong23-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 565df673ddc13fbb91a6efcdf8f976c3abe0d3ed6d84c9264eac8970735dbe79 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-95792 Malicious code in orthodox_dormouse_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7954d0aa5ad9df5d13084286b1e456765330215439dec625383896ec0b1a2da6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-87446 Malicious code in kresna-miebogor84-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ee17a5aa4d1a3c3710a37613190d6bccdd7180393b9ea01e7fc20d0784742cb3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in jaja-jus19-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 380baeb714a65de262a4993dc500f57e90fcd50bf3a484b2b2c4a751460a40c5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rina-rangi38-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9e7db9053ae5e653e0fa04274a85adb59f4866b540b8f0f765abc4f32dbc4202 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...