Malicious code in kisut-dfg-diwfzcfecdavgcab (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fe2f0339a81ec818e29743546170ff2d8688a53ed7edfb06ea9d65fb3bb0fd4b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-158551 Malicious code in lookingan-namakiki40 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d2024b4a55d411708f72493f60407806f09db4caf49df4b62affb2823df870bd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in farout-draco-supervisor-chai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d4858586155e7e63f2df1e9db1181fe0476633fc8b100b90271961b692e2d9f6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in vina-lepet23-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3bf94b6397e944eb7cc4275af52b32187d9378d519dca2e76a20a1dfc13c9fb4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-125468 Malicious code in citra-asinan27-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 541d440cc901622b7c56db26bdb47183f1dbebfa326de5eb6b2d8bf8d8b36e4a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-80647 Malicious code in political_salamander_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ed51c9374fc80d071234d4c39d8bd546afefa3f2cf5cbc1830680536a0f43325 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68502 Malicious code in gay-pink-buzzard (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6fb2f646e8f9b3310aa3c575d03016bef4c8abd26469fe4134bcf0692ba1dfa9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lina-klentik21-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b0aafa865b3bd4553666d02a459c26a892a23600f6911ed94b2f89899ff0d1e3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...