Malicious code in uinsu-loti-bakam (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2489a1181c9f37c6250e38b884e12fe14112ef740bed6d62646af1917481762b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145677 Malicious code in npm-europa-cluster-postgres (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 18a563a155a4fcc5190b127922618b5c189c218e5ce7e7be368f7fee7d1668e8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143564 Malicious code in indus-fork-rimraf-forever (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fa831a89833772caceac7a6c6708f1dc1efc4af5b76d2e7f5c29c49b52d87fbb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139159 Malicious code in testy_caterpillar_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f1ad1ea4ab735668fc4f7b7322268051d65b809c038a20b3d40b48899eb70eb4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in protestant_hippopotamus_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6e240f7ef7a8055a727ba34e7d37a0e03c101b05b1e90a1055a43aa49fa92e1f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-130106 Malicious code in shaky_ox_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c0818f1f387f6e77e13a3a491fd5327d9a6af67868330ac1263e3908fb150b04 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in capitalist_swallow_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector af3bdacad831a21eb0e5b7fce46867da5e9822ea6030e2f1702bc2a91bf1da03 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-117420 Malicious code in tiara-kupang94-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5f7a68925c751f01d0965ea446bea7e45f8e99ab57c2711384b4fb5cc01fa325 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-110853 Malicious code in wibowo-kacang95-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9d981bc34f62a68f6512af417c728077fec1257664e00a8fa5ed2fac506297e5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in wati-gaplek80-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4013a97793b18caf8c7b929cf9d6e003842176b7dad6501d40d6b116d93fe13c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in candra-takokak36-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 41c551b143d7640f37e07bab85abe403815fd14d8c2d3eb33b5ad960ec94517a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in bambang-kue14-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d3ec7a880e1df874d96ce43dd6fdf48b1a8e1c9b9b40ab82505909599cce64c4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...