Malicious code in colourful_capybara_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 26c6fca5c5e326065cd433bac73ddb9550dccc366a38488618afaeb0c7faa198 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-86473 Malicious code in hollow_hippopotamus_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3a1e2687bcd3c93106be6d90057ce57ed9c6fa980571b7b2483d6af09f149a37 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-88561 Malicious code in mysterious_mockingbird_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 85be318bbeee961e04363bfb4ebb259bc0dd880a9129ae1bab7e826b7662613b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-83850 Malicious code in candra-soto13-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 925734c29a5d9540b1568294eb74b814dbee255ee5344e0d8eff0cd801f2b94b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-78318 Malicious code in galih-bakwan33-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e4cf9bab8b9b01a7b6252471ea1dd9115fa0b2312afc3521851aa5c27d8f9a49 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in joko-kue25-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5cc1724e48d1f6420e95429794d03d903be40fbe05aeea124b742ab24e7d5d00 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-75736 Malicious code in tomi-sego56-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b39ba4dceb9ad482ea53c88f228feb02c9e6e693312778441ea9dd80667e70f3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in laila-gandul57-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e63674193f4f3a983b39bed121adefa9f5ba82b95164976ecb5ff073fbdc3115 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68741 Malicious code in hurt-aquamarine-cephalopod (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d639ab780f7d703fa2d1acae8ca34701ced21d79f8997e8f70239b771c3863c2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in gita-rawon93-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1f4066e71e06358d3a0e5700412167f5b1ad6988d7940b77e53e424017b20026 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-57032 Malicious code in joko-kue7-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d130b018cfb66af01aa730269326abd321a00ad08317e26a119d69c6b4d9387f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in maya-pisang59-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6854a69d13ec0d424cb9eac8caed9f804da6b476a98fc89c9d4040a2164bb8a5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...