Malicious code in buta-faina-aigagna (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1153f848eac15890d8e96e8fd1ce2694fed5eb8d60dc4984cf77a7df6deda7db This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ksai-kiloa-koaio (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 69421902122801f8ae8619c6717749fc6bf4f4dacd829e9d134d369395c0d663 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nokire-genji7 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c1ba0827ca533785f13a0e738278176a780e2d1e86d569b1ffc56f6754b44bcc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-154802 Malicious code in ewa-poke30 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4592e9f4c286caeb521f0ba92fd66a24b3a1e16757c884f5d5387417dba1e6d7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in eka-kue18-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cc51e56f0f771372e32b72a6ba32ba19cc5c7a0fd1a7002c400f7c0e4b114efb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-113163 Malicious code in closed_meerkat_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6c4b03c4f45fb5e7302160c73a96db475325515a112b40801fc5cf4ed2e4b877 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tall-white-tick (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a7ea3e702461cf0b28d41732b2b24b56af2aee8e07ed815f75706eebd4708387 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...