MAL-2025-177271 Malicious code in poglymer-oghh-fiaffaf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bd1c433942f8181f17418e2d91f24b66a4778175b974810cf06c51ce188eb00f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-177844 Malicious code in polymer-avof-aao (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 331d12ee82f6d8009a114c57fc25b741133988829a850ff6263dc26fd86d144e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in miftah3-miftah (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e07e2c245213ba8d99432067c0e910a634aa65e60e6fe3599c9f85bdfd14dfcf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in diva-bani-imbufabaamo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 468348f134d8f2f2fc2dd4b8bf3681fdfcae8b776ed05c8b268630b96dbc1fcc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hunim-satmf-anujafai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector de0d5caebf6adae65dfe63111d6274a234f00e897ff6ff7f7b2460c5651d771b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in polymer-afa-ratofaffavadaf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d0562b9037fb05950d4d8ab73ec3392bbf59bc7263ebc9f91f5eb0ae4a218d76 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hokage-33 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c2e7ce9671decb3a6c3cbb346ddc8b64f190133375c28d9e4b59ad5737f95433 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in polymer-aavof-afaofavbagdao (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ca0bc072e7036d3618a10726f7961069076910569b6d9812a7eb0d58afb4ccb4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in irfan-poke25 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9e788fecf5ab547f5f7d3891fdaaaacb46a6e87f85c9cdaf040bf0aa4a091c2a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in goodain-sangunu-nutagfiga (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cc4f4e12b9f07c27a4de4632f69078e9a59bf44ba2df1c5f2cb84d063b23748a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kupaio-ulokia-jakafafsofoai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2f6c1b863c2336688f9a59973c8e45c89196edf4fe6cf384eca603fe8c9b2215 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in abdiii-putri-tea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cf7100656a30c383e8ee6775e8a8daa77372f27e22f52a5b9e8481b54a357ff0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nuilva-baviva-muavidzac (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0d8c84a276dc9932acec471f964e60231540c9cbb371426ddbd7cc7be50bee64 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in terui-umur-miti (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 932373ce00cf49d74f72dd6886158b5aa409ac517c6985d4ef3b706b99a2c1d6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in butanah-fipofa-iuahfuh (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1d4e3698c4dc170b1a8d331d4fef5b80f8b2efc08527971523bc059c2fea6616 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ksai-kil-kokaialio (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e92822e7ceb164203cdd7b695ac57559ffb49c0ee7e85f5352403a08d392e908 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sahunim-sati-fadafu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 53116f965d0d6dd4552d2dfae1c7b9fa0ff92e4ac670b6de280a65992f975613 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in godi-tua-inanu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 01f0f3f8aff3ad8c14c60ca9aba5f4d1f60fa9f3983855476f35d21f58c8c863 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nuyar-adadar-biufat (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 80c2e2048baad424a39781eb31e9a66889a612cce333b32ce5e4139f814d3611 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in poglymer-ogih-gaggasa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a66d8e21102c154a5c1b400fe8ac796530938f64b62c974b04a36b6b89959691 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...