Malicious code in lutfi-liwet9-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a436f27d58808d0e48939ab4352f57fa07aafe935f7f01672bcb08751d2c195b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-85133 Malicious code in erick-sate20-kyuki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 866bb1d6b3d86f8a72a0fde1520d3338c8ce8dbedc8dbbe3235b01b33bdf7a31 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in putri-gado-gado73-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b9f09a04702f899fdbcf46339d5ff73760bdb2e09787360e9bfc42ec1d43b496 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in required-chocolate-skunk (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a11de199fb725cfa12229b8e24315bb84035439be1e175af2bc9f5c121d56415 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in secret-amethyst-ermine (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b0c8de8eca33dcc775bada0f3715b073561aca260396acaa394f93be6386fdd8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tomi-jamblang53-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ed7e18a7311d63c5900f43232a324d568203fc8bdc7e5a13a900fa36354ee24d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-61297 Malicious code in slippery_butterfly_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 862be4c8a3386ff83751c24b48302f49a113bd15fe59383c4d7e765580497984 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...