Malicious code in local-run-script-ophiuchus-global (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4bb8344fa0bf708a5d389890c5264e3d60bb553c221469e2dcda9bf9d1a03281 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146860 Malicious code in puppeteer-postgres-algol-websockets (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 991c904c75f2daa11cbf3ccea2167b46a840af6a20f253a4d8a2b60fc1576445 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147748 Malicious code in scripts-sequelize-init-publish (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f97c59d35e035c1d1dae8c136d0747c24a153a8107271fafe2a54c93169f2310 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-130788 Malicious code in udin-tumis65-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 23a0a448b27b2541d11941a985b4c26139206f66f1eddf3a7c367632c73ef185 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in candra-getas94-wekto (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ad01d375f19daf8db438fc690f6fc22135c46ab93b08032aead65c596282abbe This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-99081 Malicious code in accessible_junglefowl-smiletea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 38d9eb032824f99b375523f8324054e39e245740e39eb10ff9ca84d30a434592 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-87804 Malicious code in lina-gaplek31-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0b90bac2903955d62b11ab2887b49acf082b3daf6f906a3650991d2c79f3e72e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tiny-tan-falcon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6f843901419c246b41964318f8192499b71fe4b80d89f5dd2f4fd00eea35c402 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...