Malicious code in fatira-godotda-nutaro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 802c9f347ba7e40fe3ab49cf27d7b51628282a239ccad7f6f6203bea62a53f98 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in candra-lodeh54-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 51873f8ca1bbb5dfd1b070294c153fbb4b2042a34dbe05bf13a27d93c2294a89 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-120205 Malicious code in galih-tahu31-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cd384d801b628a5dd607e4d13ff73ff1c4de642b8074deebc1986ec2f757457c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-76227 Malicious code in wibowo-bubursumsum67-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3c456d4fe254fd64b3029ef21feedee5813bfca76e3f598918bf53863639c1f0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ripe-magenta-tahr (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3dd8830f32ccc5dbec90207b9f436d99e18c32a4e40854ca2edec48988c18848 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-50041 Malicious code in cici-getuk86-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 718ca8fabd5a03183696f5e620808243c3079c9ba90f84ec4a553a71f190b675 The package cici-getuk86-riris was found to contain malicious code. This package appears to be part of the tea.xyz token reward campaign that flooded...