Malicious code in popular_opossum_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 999240d3ea918825bd3f1cbe4f9421acfea63122f84f937cbdceabf21852b176 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-104853 Malicious code in kresna-empal65-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d8e2e40e4d5e615e3b52d116eb7fa38c233012732c8569f1fa8de243e5b4b58c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-111595 Malicious code in zul-mendut8-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector faea6458a7f4be71bab5f0e675bde5c04f9cbccbb49c1d24332c44f64fa05c64 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-91430 Malicious code in ugly_chickadee_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 439c1d4d3d5a2b39a36d46e918fb8af158fd791f9d345ceb9fdd6157b95194e8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67351 Malicious code in comparative-bronze-toucan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e0569526b0898defc248be57a7a61b32427d2aa0c2a9e0fc4bbc7c4f519ad908 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in agus-kupang66-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0843c8a1c98dc9980dfa8f84a4d0a67f819803340eb5e299d2167f91c9cb5605 The package agus-kupang66-sluey was found to contain malicious code. This package appears to be part of the tea.xyz token reward campaign that floode...