Malicious code in item-atim-kubuskiuabika (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1c5dbf06c3c308f9b1f58f5a8ac6d7f97e5692e3c3b93e0102340f957d801486 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-172623 Malicious code in verts-otio-namgpogafai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1b166053d48fa56649672517cd1eb8fdc82c230c71743010b0cdac3cac2e29a3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-171670 Malicious code in novaseer (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9b4c8da96d6f59f9e4e33919a8b2fa6ee99a89891ec74748713c380b56feebc0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-166147 Malicious code in suharta-poke20 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 88a79afde432c5f1bd8107ae40e58a211f15b5ff335569356bd66c93c06294a6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in eris-forever-nestjs-aquarius (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c1406fa4bd80fa829b6a7321e56951c0d3568b801f7775b62e7a21d9f256495d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143252 Malicious code in helmet-enif-gridsome-hercules (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2adb39d8e6ecbba968ccf3078cdaee4dc1337a58a7ffa64e62d214da2649c403 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-135725 Malicious code in nana-jengkol86-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 66f3c7b42b0cb59fe78a83d1f6e4c15bb76b72a4a8e6e2b210cf0cf76e123c26 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in zaki-brengkes62-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8d55fd41150e15318cc555d5f2418f70493952ccc8fa39c2e8b0d8d1d4a0526e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-86282 Malicious code in hanafi-gandul95-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a4debdde5f24a2c46e501859097d23f9ca327236f005bf4040270c0027754a45 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in changing-violet-crawdad (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d968826191b748111afc5773bab1e85cf2fe63cf5fb1cf891708c6fc73128f90 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in verbal-coffee-swan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 09e3248299f353b359f54950b7f642e3430c8abb8e87d4f0c5b261a0e6f5dda0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in damaged_bison_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5d54cacb88fcb5ed565be41bbc04e228fbedd843e937ce12039158ab12dc0205 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in yanti-kue35-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 64cbd295ab0f8b280d93e1230f95afbd3005ea8502daa0a27e618fea47a67493 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tomi-dodol82-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ba619752dc6f363b5cd502b817d7f85df9623324ad02822ec4275abc39fc5e26 The package tomi-dodol82-ruro was found to contain malicious code. This package appears to be part of the tea.xyz token reward campaign that flooded...