Malicious code in fitra-poke52 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4db8d375db69bca5890fbac5327ed467300e07c27d78bd63e4b258ea46fa8092 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in algol-upgrade-ini-acamar (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ac480b2708c408bd3e270ab7728873ee2cac76bfff620699b9d1e38965fe6cfd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143174 Malicious code in halley-xenon-redis-auth0 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1a82fb14fc14d212a9598dafb9eea71406a66225bce74082297225fcbb50c261 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-114846 Malicious code in irma-brengkes51-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8a5220dcb47d21d3a10e86a171f4f43830b1727e1168ab51b7bf6e4520c3e6be This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-90457 Malicious code in selected_flea_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 843600f5c2abff7ad025bac90af80d8d8d181ed40a7b6246f5c997ff2b406576 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-83673 Malicious code in blushing_donkey_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 83ad777c60b993fea75db5ac5476914ac2192e9c0351e3c8d614ee054194c372 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in okta-serabi44-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4dd7fe1694585352304a2b38521a65aa2e8a09e99cfb532143fcd1899ffd38ce This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...