Malicious code in scripts-oberon-draco-pavo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ed3525dda84b2464924e546f9db3f3b484347614d1b7b1e1a561b063779b2898 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139283 Malicious code in aldebaran-nextjs-ceres-library (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ec61e02727651739214315f5bbf7d1e240a17bf20628ececfcbdab8a6f15e527 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-133612 Malicious code in furious_reindeer_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 695c6da21641167381c756a47784e27a34af07ba5c33742b8de323f83c48dc09 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-128000 Malicious code in kurnia-lontong92-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2b479dd3ff4d33d5e348eb8f7052bbdd20747e47ea71ac565a26862be083fd78 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-123569 Malicious code in tiara-buburayam31-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f65e31feee354ae3f7b2b93d2ce21e5d58beb669d9690a5cce70d0f60242d359 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-112615 Malicious code in agus-ronde25-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7f684c038a8c68cb05f34fbb3ef97f42940ab9ceb6339ecdbffddccc0eebf1b8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70379 Malicious code in ridiculous-emerald-dragon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1faa21c7bc4d07179d25a4f899c3defa643b8f801569f1185721a1fcd1f08c2d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...