Malicious code in hitachi-poke60 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 70e51fb45d8775fb7ffa66a1ad496d0d29ede555433722faf2b8b7f7214553bd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-151821 Malicious code in aiboa-mioloipe-agatamoauiaua (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d4f349dd3e96e8d6f654b1ec306e860e48405d1c3d68df2fbc19ca4130ac30f8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in aviah-afigaiga (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2cd559af2c5593ac55eef80a9fc7c1f0e966aac3fccd6d802e1821be0c675de8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in parcel-eslint-config-castor-eleventy (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ed09a09c963d1bf3ef1d986a98accc358353ab58dfcebaa264519dedcfc5a6f9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141921 Malicious code in electron-init-vulcan-wolf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 52c5e6f24339422a4e699c277728da0d25f2a1f37dc597f3e8b9dbfdcff9bc5b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-118242 Malicious code in yanti-mangut8-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6b136c9a760c8271014d887cb66895af380bb541aedb907818c3bf5916433e72 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ida-kembang48-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0e2df6f8c1e4732b05c8a6ac36e59e7518cd95a7c8720aaed476898f15951efb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hadi-telurtahu47-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f8f406f5705e99cd282f90fc2416d4a373f125e58879b6b84c5e625054a60117 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...