Malicious code in cinta-65 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f967ebd8bcec319e739fd80bf26abc76a74972a746f842900a964a0e39ac6b04 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in despina-pegasus-mini-css-extract-plugin-sagitta (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f2cd25cf15f924783c9c0dd4ff35111ce8a5bb6b596dd67ab342567c9a9f3de6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142371 Malicious code in express-delphinus-odin-phoenix (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3d12de1692a296b43888026ae5f4cf6d26cb58c03051a26680bde2d2a9829708 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-98375 Malicious code in surya-gulai20-pore (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b718d029a0c9b78ad5c622cd9217d364acc6f38b5e731fd34bc35b0e8177380a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-64935 Malicious code in putri-rangi44-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 123a47a516901d5352bff42d8ad0988dc5b62f9d52baf63890b0bf0d8c532dc9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in eko-lutis1-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 018515be24bdbe29e44ce7fb823153574229e43cd87ff6d29e948799aa1fc87b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...