Malicious code in cosmiconfig-fermiparadox-parsec-forever (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 09f948165719318c18a9effd583b6ae532e7c7164c847038d344101a3d955ded This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in modiov-kihan-avcafivivuaviagfavacd (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2901cc6ce48aae45614c3ba331e203f115e27127530f8c1a5e5761a1df88da8c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in firebase-google-castor-standard (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c1c35d855c4037261cc0e67a28f5041d8ad7486426f5f63b1215b4d1954ca699 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dangerous_chimpanzee_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6d83a24db1f8e08c873e9476c86865df4c9356d3e4d575b1bd9d8597b2fdd065 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-109294 Malicious code in super_aardwolf-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 68f1282fc8f7e87ec550f799c53c62d00fb4c8d9ea1812f15a1e8600a4f44f57 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in high-olive-cow (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fb765593ddf1c386b753acd5a319e9df1667606e56deaa01b5afc6bca14dbcff This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in increased_scallop_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 392090a2791c29369927f18d6992c40e3de836b608df1231e3c0a98517608d29 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...