Malicious code in kapino-samvnavu-bidabi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b91bd0d568c84a442846e01dad108d479428ce9beda87684fe89385803d93628 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-175980 Malicious code in manyerar-nutar-munst (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9b3c7285c98a3ff9518004dafd5aa97a8c901b334909520bd2e078f298169da1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in callback-carina-alphard-achernar (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7bc95c05b6dddcac49573a7f3dd3002743164bfe3672fa8aafe3f35c9a69f124 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147020 Malicious code in radiant-proxima-dotenv-safe-global (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 09cac62cb9136b42af9e93753b4d8863a059f0e4b7df80eb6aec0f46a5de515d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rifqi-otak-otak16-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6ddac9e6a6bce3afbdb9dcdfc78a887f5fa1bd5022b38384537a6d3e289a53ae This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-112461 Malicious code in watery_warbler_turquoise-41 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8fbd31002759948857d019ba3306e2b38b281511246a6d6c89a9d8eef6289edd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-109159 Malicious code in stormy_wildcat_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3d501b1e14d521b33dc4974122c64a3a2044db96dff01f3c9aa9b06c77aeb06b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in vera-sambel67-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b27bbad4dc8d854ca89cf4c607bfdbbbd4926a8a346149e3582942657a0303cb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in governing_marmoset_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 588289189718432160b8f306b7695ca6b683fddee132ec923dfbd3537f14c674 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...