Malicious code in callback-semantic-ui-pulsar-telesto (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 725df051562fd911016ab37e1224723c9378e825feb45c51b9138e9a5b05c7e4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fluttering_flyingfish_replicate_automation (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b3f1b54701e5bf9f2cf74bca08a4e75934d79c9a68026885d76344b06b13287d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in zippy-aqua-deer (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7478f3cecff20e4fc185cb82ac7476fb68d395c32d4e125d7252dd4457dd347c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-65238 Malicious code in sari-miemee50-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 75d5ccaddd7d237fea94981526da36da4fd768d2df76d6170b33107ce7c62a2c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-56485 Malicious code in gita-gandul56-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d42a331683507cdcb67ec17aafb4aafc22f213cd1a97914e63b5075f1109e3a8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...