Malicious code in kapvino-sogdani-odgafgu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 507000979ff8dbd6296cc2f09b764e758f1b0113bde96f2e20e0afd02a404a67 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-157547 Malicious code in kentung-64 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b8dcaa4b5438d26c69de4057260e4bc92dbd95c9ef607045fd0bab4aa438beb6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in postgres-iota-testcafe-chakra-ui (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1560b6c8b722d09568f71ef3cd851c6896f97b12a95429813738ac245e8488f3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in phoebe-mongodb-css-loader-inquirer (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7a00f85415c125221be192b7593c512d4ec86e74fba8dc5716204f0276c44d2b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tania-mangga29-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d78dbe9fbc950de9bad50068e59ebabbcfbb453295f0a827927a6137ec894119 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-105954 Malicious code in monetary_muskox_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a6b64fe27fc7fb226c96271678d99e05d922a193a78ccf0f41c13cf696b86977 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rweekk (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8d192297d862e9d48beff79d9b8054ef83e6fd66061b88d8d7d5f1d7a46d9f7c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...