Malicious code in stub-emulate-decompress-view-sandbox (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3014404892613825d603f59e7f5acebc98b397d1e96068233852a6fa05f78311 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-185501 Malicious code in apollo-eigenstate-redis-dendrochronology (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 759e0217eb98b243fac66ee07044f52bb45dcef07812a002d4b008377c2750a0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-180060 Malicious code in teate-thy-py-fuzbo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector de1cd8504214ab09a1fc4d772d9ce0142fb330dc6202f4b5c158cf009de9570f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-137338 Malicious code in tired_dormouse_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 218f8a131f902f4ebfd965adaf80e4e4c08eb200fe020a72917ec73d971c3d64 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sari-tahutek12-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7066a698a5240d56470f7e31bcea9f263780bb280bcd9af0aab95b84bddfed91 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-93072 Malicious code in above_wasp_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d410dc7f48abc8a1361b919fd73cfdcc08df0417bc24b40b71dd7649a991f508 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in handicapped_louse_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector de5fdfe1a42fdb30a485be766cff2228d67bacb7acc90f5469bb83ecee5ce30a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-96764 Malicious code in statutory_kiwi_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3469c507793a5ee6f01e9f1a3665d5a81799d9e84623b47f4114aae576feb22d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...