Malicious code in blueshift-lynx-dotenv-safe-morgan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9dab58c5139fe550ec62331ad682959b01530abab6c25ee42eabc08fb386d1f8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sirius-taurus-achernar-dactyl (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c50c4cc6027074757c03a706abdd29d05f5adc28296556b0a8cff59c1b16c4dd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in enif-meteor-protractor-cross-env (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1d280bc7059630f2c2989f4ae50b3817b2c915851150845a4b67d6caced3bf3f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-127266 Malicious code in ida-gorengan5-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f158615e0315676768390d446af53d8bd971d65c308edd5b2b8e49c2d34fbb6b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-100569 Malicious code in civilian_impala_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8da8ddd9e28ffbbff074ff21ec080417711f94986383c221cf273344c8ab9a5b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-95343 Malicious code in magic_giraffe_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 748897cad09803290a01419e806fd9a8c7715734fc55788fe2eef1d97e078743 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in eko-dodol66-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 231e70494085b63f87d53d134271898b345f5ebc61e4b7023efefc1e4964e461 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ade-rujaksoto41-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2c092e2ef5fbfcddaa262ce0d75418e8e0a09c8526a29ba9f8e26e66fcec5564 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...