Malicious code in baryon-perturbation-javascript-pyxis (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 82e3b91264dd6978584ccce3d20c13f45009b8478f3c69fb0ec077a6d48a37fe This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-152597 Malicious code in anaisila-pafai-asioga (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1c002184aa273d0d3c38f98c87301600cbf0f2a09032fa42a13d048365b173d3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-135358 Malicious code in mahesa-dradag36-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ed49a4984367ae365f1bf7bccdbff86c991f7cec64a13e7a1e1d9e8989e4462d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mild_pelican_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 43571fc2c9560e4b4232be7aafa7a8f4947ab945a2124d85e1a8e60a70ff1d58 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tiara-klentik33-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 03630e211f85e2d72c5d1eca58d80f409afa74b999f2b3b60b31222c85b24326 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kresna-kembang95-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e9ab1504b596b9bc57a7ec3c02b7c43d21e359a691b54ead7f36e1440dd0b596 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in zaki-sambel19-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2a8db4f61d899a5cb262f2cdfe1de73ad9cdec50f593fdb06324b9118e2e22ad This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in acute-aquamarine-meerkat (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cab0fe4c040e4b6aa59687137e84d54318ee406bdc22ad199db178d18d4de453 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...