Malicious code in libc-ug-agig (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 75a9782042ebd2bfd167cc710e817c8fedc7ffcff9c2a1f97066bc4242ba787d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sahufarf-satd-fariraf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2ab33dcd6b05b471bbe7c710ca3fb6029735e08f2175747aefeea313371a920c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-137995 Malicious code in wawan-sate95-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 64bffc12ea37afe9a1aebfeaaceba2030351f6f354a46be77523f5c530787dc8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-129835 Malicious code in rifqi-kue64-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cbe949867d8b2d1da66bc883bd1df527d5f63e5854a45dc2ef98c145d4fbad6b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ade-ketoprak89-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3927fad0f4641c837b6400241a7464374309bf90b042e6c681795af2fa75e5cb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69465 Malicious code in modest-peach-locust (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4394323375238f4ed22654659efc38396d1f9a6d637783288429de549a30775a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in educational-emerald-goose (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b1bd787f810b72f5d61d02203b90aa10ec3f6ff1dc6f19f0a592f73b808ae4ed This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...