Malicious code in @akunsansan0/batu20 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 17ef860a595e2bcc8403080b8dc9a468bb4d036f2d1fc7f4cc7c1517db6b1788 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-159805 Malicious code in mansila-thfla-magahazfidgboli (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 730040fad1cf28e4ed9ec40e8e4afaab5e86203565d57d32ebfa7d60b2053dc2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140161 Malicious code in buffer-materialize-config-subscription (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 18db55707488097b21f274ec5371d25d8c58b91c6586082978d0fb1407c73349 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hermes-publish-socketio-commitizen (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cbee8924bf1b70d758011a04f96cb868c676ec29a65a31ddcbf9d973396b57f1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in metalsmith-ultra-ceres-fomalhaut (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 776689ae45d74b271ed19b9bff9e67824bd653c6eb8a6ffe860fe7b8fa4dbc11 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-131792 Malicious code in zaki-tomat34-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 88097618b0d8784e935ebcd5680fe87289a2159ae777c2efb490a2b13730e2eb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-121124 Malicious code in joko-toge6-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 600b97fbac57003b710b907d46984e04c759130ecaccf755db8a1ffed5df3777 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in maman-sambel29-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 66e5e7e61c5820959abbe3ac76c6b158e6d7a72f79b18cbffee3072177e230ae This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hanafi-kacang49-pore (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 23fd0fe31415b17b4984fe1448c93db960583b834ad1a985a4c10d97981aecbb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...