Malicious code in sau-naki-upsidaluae (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 17d79480f084ea2c15a5dce3df851713e6980ca092dbc95d9f671891f0a8ec29 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148186 Malicious code in spinner-build-castor-hermes (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 421b20dd487b367106ab1d674e21d45f7c7271a8b88f3ca452f9b4850cb33f62 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-127472 Malicious code in irma-lepet80-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f25e8a9fa87a86df6397aeac00af29a4f7397f0a20897bde42bdd385b62c8d98 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in net_grasshopper-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8a2bd79c83056c305748de73f9c7b04714d8f558de9d7df2295caa3060e5d790 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-75061 Malicious code in putri-tek64-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4d486cce0cc95a40f74ec4bf4f92240c8bdded7ff4bd41648e5fce684fcd4c93 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fauzi-keripik13-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 045a0a7fcca6f21c5479332bfd9c7faeaab56b09f24cc100529806825a9006ef The package fauzi-keripik13-riris was found to contain malicious code. This package appears to be part of the tea.xyz token reward campaign that...