Malicious code in void-cassini-thermosphere-cosmicsilence (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 40d4ba453816a13301206fa5ce0d185840b92860d050bfe09f03edf00a9323cd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-167395 Malicious code in teagood-nalikami121 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a7e5f86172cc0515ba9ddd80a18c47aacd7c66a2a48a3c4f280d1eb55486bfcd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150555 Malicious code in @miptaa02/bvvb (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 91cde8bb52a0cf0bf82cee79240ccc1265b76cdd0640d0dc8a54d874da8d386f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-128236 Malicious code in lina-rangi80-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b5f9dc0bbea5b0a6c00d7b0242d21d458fdc56a904ec25820a17b8a9e3adfbe5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-122313 Malicious code in okta-ketoprak26-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6670fa59b14e2ff0480c14dc0254d5bc149ec9b0cffaa9554f0c55d746143c2e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-95791 Malicious code in original_wasp_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ee1d3cbaf1d0933863c62459ff8b2d144369b91a1c7d82d65f5e7374c06cb793 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-90118 Malicious code in rifqi-semur1-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 85997126e89dc90e1466e490bba370c995544262073c130e379c50fe0f8a4add This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sinta-tiwul9-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7a4e24c4c6bc491480fc6ba3653abcc6a118631dac36a1020ea5b775e29804b2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...