Malicious code in verts-otimnmo-fagofsa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a3f0cbeb183449f1801ee1424f1347a7035b57ff4e824809004177269fbfb17b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-165482 Malicious code in sabua-muyaig-buma (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 651136a8912f79d12ae5a27a42a9047676cd9229ed3e630164d7559fbb184237 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140586 Malicious code in chai-chalk-procyon-fornax (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6e028459fb96e99934f5ed8686ef1b3f1f0a5844dcb39718e08d7eb38dec8e55 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148303 Malicious code in stop-slides-mutation-non-blocking (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a16cf9fc366dd5ff0fe93b35dc17840cbedf1102436fa9b3b5ef24c002963679 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-122581 Malicious code in psychological_asp_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9f039f1d45b2144a763235d522b46eab0a6ffd7ea76a83c16b83cd5e67ac0be7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-63174 Malicious code in gita-moci12-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6b81e9f401a74d2667d4f47b66a9dc66378ad0eef781e1d7cbd6f003e536665b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in vida-kue97-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2185edf3e8d964d7d8f128eee361f7a144c501732f5215e760a0539dadb2a5c0 The package vida-kue97-ruro was found to contain malicious code. This package appears to be part of the tea.xyz token reward campaign that flooded np...