Malicious code in nabuf-otgigaf-dajaffi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 022d89c220aec8f6e35a0a51fa825a91e61eeb5158db284112b6c9e560c469dd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-138743 Malicious code in fundamental-blush-skunk (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b2ed089808090f82a85756d109bf37015240f922fdcc7584bba270a1bc43f6a9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-137962 Malicious code in wawan-kripik95-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2f648c683dcdd77a5de6dc1defac2b38f5bbebe6b90495002ea3e3c827fec12b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in unhappy_smelt_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c2efa2f1322b437457e66b99fbcd00815afdce39402565391c3b194162139b07 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-107988 Malicious code in retail_shrimp_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1003f9cf685e841f4bd2aa453277f81ed30e975ec65ca61186bdd598a598945b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dian-empal12-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0142345de65b499185b396dcf2b18d3981cc0c79ca7564b3566fecf0ae7383c9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ocha-rujak35-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dc0d0e533f258db3ccc63af2a1e3ca5c041bfd0e203f35a534146bfc6033e222 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...