Malicious code in item-at-labieagyeyoka (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 07c42678231158933a01b86a9c14491f5c68ed58c8190444c13145a064a39ce2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-137867 Malicious code in vina-tomat80-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ec2719f567e2d35367b32bfdc421ac684e7ba6a8dcec70986b25070acd7d99b2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in eka-lutis7-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8818813423499766961104cca2e3e4612aa51ad3a4b75ce965694acbc1a008f7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in printed_damselfly_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0c10abf6fbbda61bb5ff3d8ef196fa4541be8de71638d8acb8045c2babaf4407 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-93213 Malicious code in amateur_carp_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 90b9b6413c748b3558dd07a6830fbd00cf4c3d5b8a03410320caaae9eab4e9f7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-94031 Malicious code in diplomatic_quail_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 267977ceea1ea234c5c8b8d123596e66ca0c766b841ede86023bc1dfed7891e7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rude-brown-giraffe (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 474b2e2f1329ddf5df1564ddd561454e5c86fff96a87098c4dffc880ecef285d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...