Malicious code in eslint-config-uninstall-mongoose-superflare (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4389e7f6cba244996efe78ec18203346fe48ed7af508ed9911925bb724a6fdee This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-160265 Malicious code in maya-teadf-nutradfudaha (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 116dc2f101b2286011bf6eea7fc314b7a6e0573a504f319e765e42a1d78f611c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ini-vuetify-test-chakra-ui (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7be5d587a84d0e961ff412a526515fd88cceea5cffce76773278d75a3fa00347 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in firebase-mini-css-extract-plugin-buffer-kinetic (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c2507e2bca64e33f699252a47bc05ebba3fc5ea3681ca06aa4a5a418b1e064fe This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in bambang-mendoan20-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c2b514936cc18878c90e79a49b140c60b928d2e39d72afa3d944649b2e279609 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in overall_salamander-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 671ee85f9bf293001b2358e956d2b7dfc430144a817f89f31fdcbe2a068fcdc3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in maman-ruwet19-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d21b88ccf5aba1eaffb53862acf964606dbae06230ac34a5745c9edb666edea8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...