Malicious code in astam-ifut-dinuugoa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3c1779a1e35ab760e13dd55ccd679c85626120eb231dd87425987949f17c8628 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nuilva-darde-fagafiafgf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 459b625c79096b6e4d38aad701fbb1bd871064c0792ccbd738944912ea953df3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141779 Malicious code in dotenv-safe-transport-corvus-hydra (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5d833eb99411857bbedad036c317ede897b63d5919e73e692817feacf64b3549 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-138517 Malicious code in zul-bakwan79-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4a218f0afc9eeedf281e2fa9c064845aba08dfa01e94d970571a2aae8b1bae1c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in putri-liwet93-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c8ef9c849bd7ca640ebb1ba65cab23df7020b067f6ad4338745965e6c4269957 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-120322 Malicious code in gita-mieaceh77-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector af1853bb45f3d49192966be740043c74395a6bc09023c1094cfbdd339e2897fe This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-109075 Malicious code in standard_possum-toolteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 91e6f8e732e2ddf0714236e9bb2e9115c60633c2259e0aa18540762eae4aab95 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-111188 Malicious code in yanti-mangga39-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d21840537dac2a2dc582ecdf67af66f83dae80b8989e60a8ae788cdfc25a2f87 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rudi-mieaceh80-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1946e89cf5719ada35511e8c2e0482b5079345c27192cfadc5061d10f827cc1c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nuclear_galliform_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a69aa0c204a09fa841b33428aa7fa0f1497ef17b98a92fcd3c9ffb0d97422721 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in southern_impala_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 68894fb30094a47cb1707a7ab52348d1d193331cb4b5b7652533fc2f080ea5ce This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in gita-klanting37-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e18953f89557e3526810d9b7f50e04dc7a492f8b7adba2dc58324948d3f38f98 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...