Malicious code in bloody-violet-kiwi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f0d15c935582d5f27b0517c91667600daa85c9e73f6e4c3e7e94e8416034feab This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in applicable-apricot-felidae (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0076b27e0642695ac64ffdfbd3764ee7ed36156762b4e347669d1026cd478c88 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in maya-papeda69-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fc437c22ad427d6f062e890515966bc17bc709444234e9b3de9031f74a6048de This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-62136 Malicious code in budi-keripik100-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a701af0fcca05c6fb5a11db91398380d741d92e3fc2cf2e1218e5abbbbcf1440 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-65743 Malicious code in udin-wajit75-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d7ee6795cf6b93d9fad092fe7261580903ff76e71365f0e329eb61cf1427a368 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in qori-sroto17-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3f9295462618bef012920ac4e8130b76cfc07f5dd693ccb99a06772e50a7a950 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in raw_cardinal_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a6960e84f48905e9c650378f674e355a89196b46c554fb6f8e7d0458ef88d094 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tomi-bakso74-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7ad03f26cb69e9ebb592d69e47e22417a6a75acf272c881038fcceb518dc1151 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-58878 Malicious code in tania-rangginang10-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dd0bd1d281dc8b555aac547a081e7f5d153b4cc2ca32a236fbecf2fef5933fa6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-53922 Malicious code in okta-getuk42-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2aaa5c2af54850fdcf77825069d1d2259bb7f684a47305922e148bcc22748155 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nina-kue14-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8ef37d973b0166b8fd5203922b79b381547a678021567f9805f56673e82a1bf5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nurul-tongseng30-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8cc28279257e041a9b82fda99e78c0d768ba69928dc81b2c601ff8bd72a4ff0d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...