Malicious code in goiy-ng-gufaguaguaufafci (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b99fe4b884f047aa23b6688d9246391637e01df6d89f59fdc568447c37c866fc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-174341 Malicious code in goodafin-nui-nutuygagi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8070e46baa68e0f7081370ee773534340e624b70d4b826a0230837f0bcab7f4b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-156849 Malicious code in iqbal-poke42 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 275c517be61433fb5b93a8548bdac83bb7985d2f71572bd12dacf0cb3a07bc1f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-112703 Malicious code in arif-lontong54-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0e981ce6253e5fd4ec3101cf983e0960173c37010770154b97b9bc5acc320480 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-111335 Malicious code in youthful_beetle_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4c90c8f7f634acdb921f05762fe47a12a5696739e46c56e5acfe6ada07d3c5fc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-58237 Malicious code in putra-toge19-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bd1c9ec9976885ab30ab77f9974303cb7d826f3ff08116d0249e6d8728eac256 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...