Malicious code in gacrux-farout-publish-barnard (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 452c960aa8905735a4d5f1b36b9b11902ec192984de6bf397eedb20365903d7d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in polymer-ibhaghsigsabo-sgdahsdi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6f4c279a8786ffbc561f76d55e7faeca41ab3ac0f81ebc84f3258bac0b89be8c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in piluka-llni-pibalima (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f7d80c1eb81bd6274b205f32cfd2f0d8e8facc747f7af4547aad984cdd736dea This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-151097 Malicious code in abang-poke48 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 97413bded9c81f5de8cd8e493392b08d2ea76fd435cd0c6909df3a729dde67ea This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cressida-gatsby-sirius-apollo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f7b83efbcd56bb732cfdce5581fabde7d9d497bed014322bbefdcb77db4b1d29 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-118779 Malicious code in arif-rangi9-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 926a341ae3385b026eaf8402b78e88d7d2fe0be5ea6019c9dd482e2abccc56c2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-103345 Malicious code in grand_takin_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 15029be6bad922d40cb5adaf33eeca07d8b64ff89ced8a7d5de67f48ad3cd61c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ade-pisang36-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 09d708de492c0ac59dda14432898af9afebc01e373e3a0ec0aa575907bc1291d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mild-lime-shark (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e5ecb0f1d85049faed3331514d39c1660a56d2f03feb1f2e4099457d65b9bf0f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70545 Malicious code in severe-copper-silverfish (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7ddcbda56f70576a79eca7669cf26b60800663c81ddcb6b6eb5472e66a3be0f6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68130 Malicious code in exact-cyan-stork (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 064e6d5f2fa9005b330c90d62d5304880d4d342ce8a329152e61c17257e2039b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-54958 Malicious code in surya-bika95-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9dfba1b1ab33df71cc4a078879d91289c75e9727f023511cdf173b0ea3a4f5f2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...