Malicious code in @akunsansan0/karedok19 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8e5c94bd91327f8ea51df74b18c10ecb0240995f7856dbab481e8fb93daa35a9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lookingan-nanakila91 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 051894b39d8542229a4c9d8538f70d0f93b7d5f31fcde9d9e689bdd276ae59ba This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-175581 Malicious code in ksai-kais-ajiobnolaa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a9433198100c1be04aaf3272ed26a7531ebb9a76e723cfaf5e07d55ce5e56c8a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in madan-poke23 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d9bb45243e284fae88991ac4509ae044386af8e5bafebf132122d45ae825aa05 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sqlite-cosmiconfig-passport-library (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fac3c4fb6f1851d954cfaae38164bfeb87249be82f97d7e6ba1552473a461f00 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-120192 Malicious code in galih-oncom7-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 60114856d506aca67163673b8cf2600b0af80c565450e86a4ae787ed81c30b44 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in progressive_lungfish_turquoise-24 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1fe0e71cd3f97926e595023d5b5f0bd819a3a5957ecd0dd9c89149b6359b3179 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in yang-teadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 97d7e9e1dfe86a64919b46de5398266a8ba6b7f6beb3d956795675c9930559ef This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fauzi-saguer38-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 13c2373dcbc978620c6c8659765cebf43e178078e8bba8126b7b1386538dff99 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-93491 Malicious code in certain-apricot-chipmunk (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3dba0275cccd2e3b755ea5f24838c08262dfa93b4db71f1d696ec896262b91bc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...