Malicious code in child-process-telesto-test-proxima (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 173fd53c1da999600d870a02683e28098bb3288c9a590b7739013b33c2b68fee This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139715 Malicious code in auth-atlas-oauth-nova (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3cff2e1a60b148d3151b2476f58874193bbcecd8ddd2bfee1f592bde3031ced7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-118514 Malicious code in zul-nasisayur55-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e210666a3e9d5b6c1aa4a2497a0e05c0be432ec64c37e11fe5e9da69f2b3e7bd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-110363 Malicious code in varying_fly_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 74e4f64cd51288d00fa339a3d2b4da1380480104cc1c87d1d5da9774d5700de7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-100810 Malicious code in concerned_mastodon_dumbs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2be99c53ac27fcbf6561f3d7a77ed120643666fe53d7256e51afdaa3da59ae2f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hanafi-kepok13-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 734efe62d806edd7378bcc041d677ae97c97609c390715270d5045fb7d63a415 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in quiet-maroon-narwhal (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector de3bd0edb2552011ac222175d729fb3e362b9a78009e25d45787e4950496c7cc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...