Malicious code in luna-cordelia-blackhole-lithosphere (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6f4671bed4986784ce341d0ba6709ba439dfb5c96942dd8001c1ab0c963fb1d1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in teate-thy-sonic-nejnaz (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e408a852eff89e5c3d287c0bacccc7825cd4b1e30aabc445a4c60d44c679087a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-178239 Malicious code in rindaman-poke73 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 60547edb86c0f57484b7fd146562d45d1046645cc15461b4aabfa418623a8786 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141165 Malicious code in corvus-puppeteer-eslint-config-mysql (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9a339ee93474eeaf05bb0ccc6e79ce00d741a53f99c8a1e41fed151288239494 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in joni-bakwan36-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7022a5fdda0297d84f61f9c4cd953a632bb98d301240db9a89806acafd30ba44 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-85591 Malicious code in fitri-bubursumsum53-sumpek (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 50311dfdca6447d0de7ed88eade7fa3fd5ab6628903027cd0c1cdd783a1ab606 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in favourable-emerald-octopus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b0979d983775dea036b8ec3c5717fca2352de44e9efd68c680ead1b3fd18d32d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...