Malicious code in carina-loopback-zenith-socketio (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a938276cf14613f10aa6d135009c7b24f7fb2e652a0db5c52685da55ce264972 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149444 Malicious code in weywot-polaris-xanthus-upgrade (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f9d233bc6e909b852af91677f1004498dfa77352cf038421be38e8ff56b9b038 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in miranda-nconf-package-puppeteer (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4861844fae84d7b05a5030f56b0acc16628a4c8ba3f5d874c50d0f49d20539dd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-124411 Malicious code in yabbering_grouse_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0032e4ed10ff80d5eafa66c5c9c7754b69e32991fdeea3c08449ed8848ad763c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-116995 Malicious code in secondary_elephant_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0f94a775e5ad69d701a7a9db72acde2183c1e699424190af09a08e5ec90238c7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in innovative_moth_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c747fdcad7d4eef5f15419ca15e65da45d33208f095b15f6731d547b81c9e1cd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-85891 Malicious code in gilang-sate25-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 354d924bb0b9df29920b051501e0a4e11d8ff6cf065f5bb058b6586a8089b789 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...