Malicious code in rest-version-library-hadron (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0e3b01d06955b1393fdf87ea7bfd085c32e43a39e890b503008aefae093db6b9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ronaldowati-cir15 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 249ec75fd627701a16551d1e5f6cf3fa36e241edda5439c3fdcc97deed748db1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in alita-poke86 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ff107f09b461eb2fa77a8c37abb33f82ed02c7ab430d00d3dc211ea179e33dec This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tobrut-hentai-anim (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1c5cf8519facfc8889a8d35ce26b279bb976dbd9f02fba4c49032e543f6e475b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-135568 Malicious code in ministerial_tiglon_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 465f30d3bfdb967fdf950448cec9c592bcf50d47fe0645826572031f14f268b5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in qori-rendang88-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 981d43c96b8f6b1b5f8d9dfe9a1b7dc0c8a642fe6f189d1c403eaea5ed279965 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-77514 Malicious code in dewanto-lodeh3-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 38a0160aaed229a4e7d023476b9389925bf706a3103ba021863330acb0b70aa3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...