Malicious code in lookingan-namakita27 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4a173ba332785d14b4542d4e289c51742149cd1d71074c0ab20783ad919fff87 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tuti-botok60-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5b59cca24ed090c0b50cf508a29340ea1a705de999bbbfd32070c493aa679f9a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in candra-rangi92-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 96d57cc25b6383004134e1a9cbac9837c70b576ce4723c899b64dc5e7d2aab26 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-115166 Malicious code in kiki-nasisayur66-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2466171d4a873eb3f0543e735d9e9ab47eb608fc4dc368a21302ccd9b0193331 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-97008 Malicious code in thundering_constrictor_requirement (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b3a41cb0634953b62b0b78fa78b1fc34b767c7128be8c09a6c2d1518c5524f89 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-76897 Malicious code in arif-papeda29-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 797890537ef4844201f10c80ad35d882353d77d6701ff2d9da5018558f9d4fcb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...