Malicious code in winston-process-fetch-server (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f32310e6d14f06422f625862322cf64c1e6a08c795148c10b8a5c50e384c2f17 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-185301 Malicious code in tunis-kt-gabf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7ac5d3c56cfe862daa57ad24284b0d5390b34915dcb7b97bad1bea73095dbb3b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-178432 Malicious code in sahu-satg-fagai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8a75da9b2380f1bd813ce72c681d766b3c6a5bef7d76ff20712bf6f3950ec237 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in messi-sdubjda-ssdfa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4aaa2fc0ddb486cde642b423b8b582222eb571ec5ed72c906f240cb72bfe6e15 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nasution-poke49 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 068527a4147f1fd3b8e8914b54fab7627096961351e577d370fd1a37f8395ee8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-163414 Malicious code in nokire-sekiya26 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 63a2cd0b63b646f570a3d2fad0e73bc963244f698eb8ca384b1c5695df5f577d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145420 Malicious code in nextjs-ophiuchus-promise-umbriel (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c187d34c2d44192758f3a3912218065e845cf8db834b7b605521524885b719aa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-118747 Malicious code in apparent_armadillo_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 186eb4cb57da5e9bb2dbf713c49db883624fa23c04b3dc536eaa0a371ed328b5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ocha-tempe88-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 58afe8129510365ed70974d31f969f4f83781f3d4a34fb32b314488d9778a0da This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in isolated_aardvark-excellentdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5b3eca775bf92137d79164f3970d5e65d3a1c7a972b9ad861376b52e6cf04c34 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fitri-tongseng68-tititugel (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 97bc36a660155a5f15aa798a87973182a12a4290020652935a9289d4db1e6110 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-92030 Malicious code in wati-kupang10-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 012f695ae61288137ca31ac98df712d89886af8ee0319051ea7bb06f87e56a84 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-92187 Malicious code in welcome_angelfish_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 14aca1fe90d5347a91f0a42230a4ef61aa8b2fd9cde7040f9b76e4222eac51d3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in magnetic-chocolate-anaconda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5a4d7c57f2144853be7baf855961c310832138026af252cae348511df953ba95 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...