Malicious code in yaml-barnard-jekyll-magnetar (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 647bcb1618cd7231944ee6afbd42020458061895e8490b3d485d6225634c630e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143473 Malicious code in hyperion-express-levels-global (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 90de39791303e3f40652d0174daef89cc814105d6bc42e8c7cdf7d0e96351cd7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nina-keripik11-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ef4f5700d451e2980bb9fe14afa1f2a1f729c76659dd586edc39aa646ec395e3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mechanical_caribou_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 68cb498f29f0aa846b1f1adff17f075974ef80dfd84b7a88be71359984b81767 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-108935 Malicious code in sound_macaw_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 270778d9c003d450b1b802b9651898b46217f6e1aa1c8d36f38233d215ff80c2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in delightful_ferret_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5f59ff8016420c50f3bad4a9d414fd8ff2039823d974661190283857f443534b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-90951 Malicious code in tania-martabak65-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c2efa70127e85632b519c270f8e7f6c53858be271f886d953d71e7dbb4ffef1b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in linguistic_squid_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 360352dd7cb03d7beef0d01c120ee62b28f24f53cd7e75cfe8b522529db4c36d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in jaja-tempe96-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 68c9195f11d652ae4d4170687983fd5b4879e11cffafe9f1ee3f8ac68c88bac5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in wet-black-python (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 257acdbc69da100c14073df4ea73f72e7fb7e3e6f815b1974e3439680a52b43b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in presidential_reindeer_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b5064d1d6a78bc2e7ec147ff20def1148aac07a0f0bd2db53f6a4ebd3f5d0636 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...