Malicious code in hereis-maniac-tanbuykun (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b8abef596160215e06c90cf354f8630fe8f7addb27a23b09793bc1159db0a319 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-155846 Malicious code in iba-otanai-umaibtu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1eebf1a93f684e4cc5c0cc9152898129827c391ce65685b05fca7fb79b8e01cf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143012 Malicious code in graphql-virgo-prettier-ursa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aaf0c2ff36e58cc35243ac8e68be82032aa3e1c00c0ac502474a893c01758736 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-110508 Malicious code in vida-tahu37-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 08f4aa5dbb38542100a32b1c5453332fa0e7967e3186bad3ae0ff972eae7ca8a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-83705 Malicious code in budi-bubur44-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ef08c12b080e6ee77d9d88a141d532c9114616f07315bb1531f0d3253da80af6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71466 Malicious code in visiting-scarlet-centipede (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d75c2cb385c52a546c62e3c58eb51ce749259788941929e0f3202105ae7e9868 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in gita-martabak53-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 094738d840fce79ac2573fb3f2297881165591714a4dbd9382d425c472dc8fea This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-55514 Malicious code in candra-takokak92-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a4b94aab6bd9c02998dac8e89926e7de48d9867e6e1cccbf0982e9a0325337c0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...