Malicious code in devkishore (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 53ed60eeb0358df5449862846dc76a204d32e0de71ec3524f9199883d4978047 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sabubaali-nalii-iyap (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 715d0fb62eee38010d99dac90229fa10be9530dd9d56b647f9b29f0c286d9aa1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ucok-poke75 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fa936ddaae238d30802aadb009148065a41bc7dc9d67220da976c6ab7f7a0e2c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-169805 Malicious code in uinsu-lis-dingkos (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 81c3214d8988546b0f4bf8c4e64596443f8bfaf43087a1aa0a9f75e8a67312d5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in eslint-plugin-tailwindcss-cosmiconfig-alphard (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9e8afdb64b20c818f81c4e664f57f0d63604e0f039189a3fb71f2106206e9cf5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-132325 Malicious code in budi-nasisayur54-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d36d644b9a82781e2e79fa95ded1c15aa8c3ac7f6328ee136290ef75a0d9ade0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-137969 Malicious code in wawan-lutis31-sumpek (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 092e05c0e6631478ca62a3ca295cb04586406ed5746b8a14959a2ba10734eee9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-126863 Malicious code in gita-lapis85-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0b4c3599365704f5fec4121cc874eb8256e18ababa39418df8f59ab5dbe45155 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lutfi-lapis39-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8d85f0f05f829c06438376340e709ed08158cdf1d97961c325f0aecb0835a9b7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lina-buburayam82-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ff272382a92ff2297263bc4e5febe2a381ca4518c14139b98ea01e0c20f8fb4d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-60290 Malicious code in disgusted_elk_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 00cee959dfd6088457d265c49bc0070d22ce99d2ffaad2ec48efd0f51d0d49fc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-58135 Malicious code in patria-otak-otak18-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 46e0c76f86599987ef8d84b3a6ce70f79a936b753aabbfa81916a07ffd8c9605 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...