Malicious code in guilhermecosta (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 90a7001af2c42562b86c921516143fb7d4933567c74d96c377c1e38ca0961a1b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in naumanabdul (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9a6d0b39282c10df0627ecf09cea5506303f628e33f57e609aa6eb05a9cead1a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in abih-poke18 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c3e1f456dd357bb7cdd8bfc4a8f232dba1db354d96faed76154574f1739e18a9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-168313 Malicious code in tealove-darknest9 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ccc5e2ae520b8e6b114488f34d9493f3f8573694d9e50710c5eb0f0e9ade3b5b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-152719 Malicious code in arif-poke13 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c6468771d3c80ee6b1203965a96a69e021701b0e611390fe962c4fb12c9d3948 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-137109 Malicious code in sufficient_mosquito_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a8e557c059dd110d3836c2bd4e071da039236e743f0e62f243699e9562bfcb8a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-134557 Malicious code in jaja-nasi64-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 92910fd39ed6e24d5666d0203db155655146c29e1ff9d068fef51a98a42216fd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lutfi-kacang84-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f2c6a83061de22d6d4a7f208bde2fc71ba69b0988873ea9a931429677eee68b5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in xaver-lupis22-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 421fbf3236932b113911bbfa727b107c4453057d2f148e24e2caf90700c1da88 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-85364 Malicious code in fadhil-pecel92-apidev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 282abbdf66e87470c339684966ad0c11db3f7e0cb3884ae650f1744478e562f1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in linguistic-silver-marlin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d4bdcca2c4c936494e9485c433b3fa49a8483abb0523961e720b3f847ea2a8c5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rational_hamster_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ca2b11c589501f3dbd31e234624815b6b9877b488482447d8e54981ec443065d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...