Malicious code in kastra-perseus-comet-deimos (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ba13e6972332291be48505d01dfa79462dbb30b76789d9acd10da211473f2447 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-190170 Malicious code in visualize-cache-web-float-slow (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b3f7f24dadcead52f45d3b13c1e58579d94e0015bb0a26dfefe06ac153a45caa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fadila-poke81 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9ddf2562c5f7b00f0bfb540192c684d668aeb28b236b35ba7084c6272bd33b75 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nabuf-otoimn-igofoggi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b420a3513bbb4ba4ff08aa7765be4b4230cb0d13bf6a5f5256c0e1bf3617592e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ilal-poke69 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8552befc83643492ccc61d3b7301188b6a19085a81b2cb5e927ef1302b21d523 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-159111 Malicious code in mahnud-nofty-mutafafu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 19e166286267f983b65e1b872737cb6a2675a08f7a524f29d12f8f5cef82eda2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-151962 Malicious code in aibopuna-mobile-araoiponabi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6d085c0925ba4604187fab11531644b9cb0c97c24255edfefe8f39e4428f34f6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kresna-donat15-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 12b1254009a1cc93acc744c414aa69bc918ab653d2b478333b68079b9efe0d0d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-82912 Malicious code in ade-lutis86-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 96b76a057b3099ad66a5d9984d7dc63cd5e747122f8cee99d97404eaadf4df30 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69993 Malicious code in pretty-moccasin-monkey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5ce515512d0715a335eff1fad4116d7ddb18cae66f468d7d36b5643527ef2150 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-58169 Malicious code in precise_frog_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 747e5449575240f3d0a3293a33e9c46ab2c64166df6de29a6e1f9a9ee3ad6bf0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...