Malicious code in trevora-cir8 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1cb0473a519da071054d9631383e12a0439e953ac5d51c85de37b8008119523a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-136668 Malicious code in rifqi-serimuka4-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fb1b72f8aa50fed0b02eb3fd8ad8dd91d9a28bf5170936ba3d933cfe3207a678 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in jaja-lumpur52-wekto (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f914a904da6da32d4407e34af1f0f5c2b62b5a4b7367d0b0ca3e842e4d2f9e99 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-116432 Malicious code in prepared_panda_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c9e7e567aa1818cc4267cbbeb6b45266485a1452eaf5f6689776d3bf7a458dac This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in thundering_raven-silentdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 82fff3f4825029a31d83ebd77fc4056500790584e041132c64803fe0dfe46ef6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in putri-mangut50-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1f63e612606bc8a0a0292c67dd04d8a4efd58ad064807b8675ad75b393be9075 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in actual_bobolink_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6b68ae8bcacdd917929825c6ebaad314ba44de8a764118cbfdd2d90556a41b0c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in gilang-enting5-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c0ae4e93bc9c1da5bba54a26fc37c2de2cc94cc57dc8e19181bafb7e887433a4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in andi-naget35-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 416ccdf405a4388248d7cac503d86ffc9c08731f0d8ff7eff517ee1e4e584059 The package andi-naget35-riris was found to contain malicious code. This package appears to be part of the tea.xyz token reward campaign that flooded...