Malicious code in sonic-kaos-fgahgfa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f2655f7ee67cc735b4e907ddf0c103746c219f5cc83449838e38f1de79ad6bf2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nedada-fofiri-agoai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3cba5649a63aa74893840c7b7ca29846060e350f2b64d6b529320185eb428d3b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139696 Malicious code in aurora-cache-soap-solis (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f3ced08f984cae28d25fe2b4810bb45fc53cde4f66aa701e9112f87a78947c5b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in galih-serabi13-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b7219bfff03d8c30cea4ac851973210cbea82f6f902cb3b9b97307c3f9b100ea This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-125169 Malicious code in bella-lontong14-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5d1cc00c503a45e592ce351d83ea06a920ef5ff4ce9fa141efecef8f46ece304 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in irma-tek20-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0887da577e48fb2dbf09f792630a3ab8ff86c5465004f7c7d2708e80dd8cc2a5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in iwan-otak-otak52-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6157b8e276bae1348dc45b8a8f0f1f726851b78fe88b1d156d0ad6bc5ba315ff This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...