MAL-2025-164489 Malicious code in polymeria-buter (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 01fba03c7ad4e5e664e408903479bb6507aae808589a506260ae4c75a7570c38 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-169992 Malicious code in uinsu-lotaihmi-klu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0b219643f1e884967860a71b76e84fb075c4172044242691b6ad0aa4be137196 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-168444 Malicious code in tealove-nanami16 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0930cb1e50c04b2cfec8a79cd09c396bf3f4343bdf1d6e5d855815384adae800 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-165474 Malicious code in sabua-muyaig-bufat (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bca901ccaf2d01a9a50b78445eb4c887b955b4c9bd1a92a8aa11776067cade51 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-162475 Malicious code in nokire-arjuna60 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 642bc429d4b2ec518a7f8469e60adc8a6a197d0854f3e2a677576fcc6c0618cd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-168480 Malicious code in tealove-nanami5 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8ab6944597905ff389b7ae2890cb0c559832117f0f12e68aec5ac1d83ecc4a48 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-159202 Malicious code in makan-aigooa-iutamafai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 82846f411b9c7ba4dbfa03aa511f706105aa1107c5913cf8909f123050ea3b78 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-170459 Malicious code in verify-tactiva-m (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a74ab8e10a5ecebc361c0bcfcd6149f51a22bc302c8b280e695953b29f69da19 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-156497 Malicious code in infi-gafob-jagoitaga (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 38b3b6aa02cb61c4b69445182762e7a2605243cd5c507b0ad575f266bf7c1465 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kentung-63 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6c44d176407d4da9e7089ffc57beac03e520f4b3605991078ccec31250d5b2ee This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in alvino-67 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 97239d53b7085e8f75790a43f3003c002e0b999e0ab9960c86a3333a7182a29b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in slamet-poke58 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 08016cfcdd71ec3c735a61489ae2052d7a3b558257d08deb88e41e96c16ceef8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in abiba-alvabai-aytbuta (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b443a50575f15f36d2d811dbeb461031d4f874c6b3df48c238368d81c952c8ad This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in uaragifa-ma-sauf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e5625c58980a472828dc235d7a7df22fcee1b31a66c4c83c54b79a4dab18aec9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @miptaa02/aim (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 07f68a899d440e1a147ebf9b80f79359f78aa6ebb32dbfb9370ac6ce592cbff2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in jurss-gasasd-9sas (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1f2afdfa52029f09bb6795bba6fd5051c752d00c518eee787260a86fd11f6a13 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in manurung-poke73 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b32a10123c14efbd5714358a7d3569425ab6c4e3596250192450cefbdf5658f7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in teaa-reborn49 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1bd41b37d3ccef7bdc50930ce2567bf189faa8405c0e61e6850a132435e10781 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in bufpani-mau-nama (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b47b1387ab8f464ae6c424827f2178bbdc9a4d34f5f466e446e88606fdd67228 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in teagood-nalikami27 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 38ed5595087b049dae4b1ffbacd9e1357814e98fa9e0d100452f82a280082cd8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...