Malicious code in masolv-avilo-civbusasofoiv (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 47722648a83e49f015a0770ceb44ba1b519326584f4c85c1dad2edb8efde368b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-184138 Malicious code in mlokok-lofki-afahugi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector df7eae4c0606b881eaf1d5cc9ace7cd68e85afa28d1269cc3fcefda0e329d745 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in carpo-ganymede-kastra-leda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7afb774a53ba565469f8094ace021d2bfe40abb0b43530b02ab62cd932873e43 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-121996 Malicious code in nadia-tempe92-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f770385b7a6e7e696b0c096eb3ec643ce22c6b77dc739261c91bf7a8be05d251 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-95993 Malicious code in present_warbler_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7e9b179a042d22a58c63dc1c54d4db160a6d0328b27b38abef57b2d9cd517728 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in oktafian-mendut61-kyuki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b82267ca825dea02c3289abe2c07ed874f550b0f6e10f5a00855bbd90807945a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-52575 Malicious code in utomo-gorengan47-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7bcd11b26ee054bec558ddbbd1ede3b71ebaf5b2c10a8c4df82499bb3e542981 The package utomo-gorengan47-sukiwir was found to contain malicious code. This package appears to be part of the tea.xyz token reward campaign that...