Malicious code in centauri-lacerta-config-taurus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b3805c39bc995bedc2c84b0d6740aacee5cef37f733218138e2748a3c8e387a1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ican-poke81 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 54ea2071fa22e84d0faba7da89b1ea318a65f9da9e50bd716ba22e0951648f73 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-155954 Malicious code in ican-poke72 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bd2c4eb318583aae453ebe548cb7fa4af19500224cbda9ec5d83727fc2d2c5ef This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in bitha-90 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 713543a59bf8f4047b3f8cbe9d0ae560ddcf82bb40c4b125d082ee34acb0c01b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in inappropriate_snake_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4e61fb913d5c158ad68befa6548fab7783e4b8763e63d3a3fc764fb4449fd9a0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in gilang-sate53-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dad92b0b33825686aa1ac29ca79ec3cceea9e7b1aae08d41e8dc95124f901671 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mahesa-kembang7-pore (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 527cb0c622df20f4b6de757771d2cc28690a996d0b3b55e00e44df3ba8430cdc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...