Malicious code in sagitta-whitedwarf-betelgeuse-plutology (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c2787349d2a0b1c5c6c6c213c0c755d72dd5c786eff681299c936ceca5da3a44 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-169612 Malicious code in uarug-miafai-suatafi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 10601183926b81af9b17c76a3965a34a919882b2c242ec0640e0ab52b2b75c93 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-66886 Malicious code in autonomous-turquoise-otter (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3703af23c3e238b3089a9c69c6ffe803686028c0475d34146ca4c4afe8b34bf1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in novel_parrot_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a03c4f322dc0a98149677cc88cf69233fb28edaec36f5207baec73af080f3a39 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nadia-serimuka19-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 77fcf840981056da21e613656b226ae6798fbe141f03df629294b87b9ff90b4d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-54292 Malicious code in putri-donat60-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2d4302848a127424f40a74202176fdf311fe8727496cfab450cf69b58124009b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...