MAL-2025-178430 Malicious code in sahu-satasmug-fgu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3d956584040c8850d85b2cbd3a393ed48b2d387bd1e34be76eaa2f2982b39b19 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-177663 Malicious code in polymer-afajif-roid (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8d06b50b26c47a77338a6bf9d92c2e1673134052422ddeff6bfc35fa3b43073d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-174536 Malicious code in hakim-poke24 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 35a4bb20d3bff861bae729d695265532b9ee5dc7448f1519d79b316f7cb7c972 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-172639 Malicious code in @mipta1/rsea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b7b14f82ce3986cf17b6c8ba0654f90fdb145097d6410650cfa31a063de99e77 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in poglymer-ogmih-aafiaavg (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ec5492f9a5b0faa3432e07fd26f18b34c82fa8bf80e3698405c5478ffeb6e789 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sahnim-satagi-anjifangaa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4e7ddd5d3be818ac88bfbcbbf1c06d8ec0b0ca1f05f3ec3387568bddab099c18 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kapvino-sogdai-dgagagu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e6983ad5435cc960c674f4c8df3c723fb5e70da75eecbeb8e8805c62f90ebac8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tray-pazap-paoim (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 00fef30279b3ca07eede2614f1d1afb20c88c16c1e36d00b1bcff522137fd496 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sgoodaini-sanugsa-utufa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f97178a603cff6ba5fcadda0967e342c991efdf2a12cfb696557d813682c32e2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kapvino-socovni-fabvpvcavnvai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c4b0ba78412023235b95e0d3c901173217b353bf009f5ff99041cc117285d7da This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sahun-satud-fadoria (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ea2f2ac83c9f4e2fea7c130370f21f0cd03e1cf6764a9d9289ed6df2650d830b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in butanaih-fia-pafasi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 214b7b0ec8e9490fe2c8770254462f72c618e17a0af48b20edeb92c5bc92e0dc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rintono-poke94 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 781fc8b91b74eaec10526ea594ad540a8771a1a2df29af73da52b277b632ca98 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nuyar-adamr-ada (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0428b778941c5cd43b2870c541c78c0bb997c52dae817706b19980be436cd4e3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kapvino-saufdggafoi-ugaha (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a52fa33aa18c76d39cca583b1ac9550c497e949cf7c53d7da991423f9f95c5a3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in polymer-datdfadsid-dor (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3c56fb847c788955bf03a2e7dc4ccde119c3048d16f9345f47a7a36c40c56e00 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in buta-fippoa-inaufa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5c36065b481e6a544d64cdef291a15ffcf9182f460687dd421cc83832cf5ad03 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in polymer-init-tesas (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b7234d4995ba75f1a5aed970bf54883653fa83934fa7262102376d3235de4e10 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in buis-suninna-mubanaaba (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 389c11e6316e9d35c31165c781cadc65a1ce762bb53bd66c1ad164634d822211 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nuilva-avmiam-ravo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2dcbef8d44e3ca9e1cc670ef86ebfe8c52cfee1098f010a57247421050582efc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...