Malicious code in illegal-sapphire-asp (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ef4146466f4109972fe3adb8eb38f3925b43ba5302367c6d069d67e5febb795f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in written-azure-duck (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0986ad15a73a8fd29d8f24e25dad0cf708482a0fd2370a73d604ee85be9333c0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in depressed-beige-albatross (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7c63e4d1616c090b0fc0aa18a9061adb7b30678afc1abbaf9229236d40bbb953 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rudi-buburayam14-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fc6d1564b14ad0ccc37f9b9e26d76349448fad951566db800ef2988192bc5c33 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nadia-ikan36-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 43ee149a14d2a0faa996bfdf787779196d0665881d8a3710751e412b99ca3445 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in competitive_worm_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector db542353c6bc8686b37f1dc6c5130e7496c9a8f36d3238f8c138acf39e771b53 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-55977 Malicious code in eka-kembang73-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4c84f2b539d640ed52062abcf133dd6e0bb4184020ac1f01bca8c17bf6320528 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-55783 Malicious code in dewanto-kue86-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7cb644bc8889f5f9dc781501e21bbabe3e713967f5682b3610b35a9a33647170 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nadia-sego38-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c46239b2f9aeb284ca730291dd22d4f28f9e2fdf4c507c0850d7348ca5204c77 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in joni-rujaksoto15-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bdc966bffb9a366f7f9c5d4f1bc54f262eda8f24875b98357aa6166a5fbdd584 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-51798 Malicious code in fadhil-mangut55-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3e0f0902e10211e95a54b13f854bc9ad1d0a70db426368f5721a9f61b96fec43 The package fadhil-mangut55-ruro was found to contain malicious code. This package appears to be part of the tea.xyz token reward campaign that flood...

Malicious code in bella-lapis35-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9347dff33be3c75dfa9541128f586722f88c9959428b5c31cb35e4fce942ade5 The package bella-lapis35-miaww was found to contain malicious code. This package appears to be part of the tea.xyz token reward campaign that floode...