Malicious code in thambi-yunik-musgi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f2a531bc547de4839d883ae4e5da08ea69907f25d86eb88f8c4fa7ea7c39a357 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kapvino-siafafiama-agada (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b60c05b8fb474aaa9352fee75ab1925e5480d872a4921af16de1189a1e614c8a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-161619 Malicious code in nabuf-otoimn-igofo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9caeeb939035fb2a72b3b633eb1fd8d89135b701c7f6002b2e26bc98193bdf7d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145726 Malicious code in oauth-dorado-gacrux-ora (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 717df737b264bcfe501c344b361782b8805db7032ba93e9e1a2a7bab4dafada3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-132281 Malicious code in bella-tongseng50-sumpek (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bfa73d2e847b0ca8d6f7dd416b300026cdb5d8d53d50f874a603663dee770ff1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-116068 Malicious code in nuclear_bobcat_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 69e4a8abf04fd88951dfda384cbc5650480f089616531b0f0132f0edc6932ce9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-118207 Malicious code in yanti-getuk41-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4d6975bfba916f350c58224d9b2ec73cf13ccc30eb3c8c4070a326ace244d331 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-94251 Malicious code in encouraging_tortoise_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 54cd79cb0454607dc421e0caaa79820f7c531bff9027f808ddf1ae8ba622c2e0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-92004 Malicious code in wati-empal54-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5a330f71e8d2d5c7b4a12b4cbc65fd4ea19ce2e9fcb63ba260d72272414f05f7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in bayu-mangga63-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 98b72b36e72a35040242284b7c84343d884a6cf480a2da37ca694661d50f8d1b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-74073 Malicious code in laila-mieayam16-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 18af11ab95b034dc5cd4f5da5fe3db71552c00798e0977f71c5f5c13ba2335e9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hadi-mangut68-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b0d0791da68e4d18fa5a757fe6ced031dad6d07b30442b7ec771a610f30acc63 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...