Malicious code in mlokok-lki-hakumajisubi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector beb4df62a99d5f79330b894c77240e2bb4d8eedba66ac2834e43db5e9af11b5b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in poglymer-ogi-agjcgfkaf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 48c75f36480b75d748b2c5ea319b4f379bdf93fff06ed7067a85f34598533c28 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kupaio-ukutoila-jokilokluana (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2b0fec56eacabd214e9cfeda363f4e86d34f86a3234046bcdafeb7955448c2a2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sahu-satmug-fauaf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a4a4d95b0b189bd072fd87819a0a05e46d8edc66ee5c67733a8eacdfc7071b74 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-164142 Malicious code in pilka-kalimasa-vubiucb (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 47bdc987967d2e1abfd90aa5f5030853b9e17d337d96d1885d34bab72e9e0840 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in key_frog_salmon-90 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 733e248168c21e062596b6724ecb65227ed6e4f26c6d6fbcd87b4cf8d218bf53 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in putri-bakwan36-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8a11bf9120006f8c9215417dea51697ed55f01d2cc862266350bf3fd6049e5f5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in insufficient-lime-deer (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8bacd9ed1fa4593049bcf0b6070a531184af86796a6b38b37f84b1ad6c1b8ba9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70836 Malicious code in steady-yellow-lion (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c9018b11d024cfc31360f40cdbc772401d09176953b124ccf887d966b7276f22 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-65560 Malicious code in tender_hawk_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c7e0abde0aeec9daabdf9e687af5f81e2255b9af80f6309fb208a24e522ff3ef This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...