MAL-2025-177971 Malicious code in polymer-gibfaaga-aga (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1494ff6c654646f8dfb78ee7c98da5bf180f6563ff3bd2e27bba1a2dee250dd9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-176614 Malicious code in nuilva-avmiam-rvo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 48e4f55282ac8c6728fd65312ac4db8b0543baa2aa07e73b9624c58224f1c950 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-172879 Malicious code in ananda-poke22 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c5a409b0910ae4cc8f0b9a04387e391a7b7a8e3f4dfe9df43188ee92c7233d8c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-174023 Malicious code in diva-tutai-inva (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c5d6ae0d8d77abb00597a58515f1d19250aac06752da8c725f848d25b0963587 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kapvino-sogdai-dgagu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cbfa17e06bbaaa0f0d3a5f91041cd90900ab20848560b3a63ba63f224e8bcc51 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in polymer-agiaaihha-aftfsafyag (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 731cb319ae91af385bf8c5233eb079b263b169cc48ac3918c1a851cd79971fda This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in anidta-hali-miadil (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 175e6c5d63a82132e22ae5c6c40a34f4271940b1c8fab3bc61fa431d72b4f430 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in teagod-nalika3 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5df623364d2d4a5ada0fac248ebab47d69688fcc325627a5a7fe46df2110fe45 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-176059 Malicious code in miftah-miftah14 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 460468fac129db9229268e992ae5e7da102404bc1d5a4f3b5b8bd7e25b0078cc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lia-37 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3e6c6e0f47925ba9e7f34b02ebfff4b745285f36b3ef8afcefdc5f5c418efce5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nokire-tanjiro5 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 24362311ecc487801c4928f1cc02d104e6aa122b6a1808d632d58134d2e909e5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in buta-fsbina-infa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 21658bf5f2eaa42fbd83ea245308cf4d906bbadd810038cbf66d8c7e125657be This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nuragi-sutau-guiavog (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 16fd79936b320058dd1bbfcb8e3c5fc9833c2a7b811242646d6e1ff9636054d7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in polymer-id-doraema (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 552229e2f5e7b2dd80a5991ecce31289fd7eececa58ed576a47ff227a1659c55 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nuilva-avim-rusiinva (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 57d377d422d0d04232231e942e2861fc67db3e89a5d604588364928dad85b276 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nuyar-adamr-adaasafa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector af52cfdfdc017263b39290c0e2433b7a7e7795772b3550fe02999cd8ded95d00 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in divata-tusintabi-ivaaduna (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e002a74d6ecb227ea5ae1c06db2234aa1cc6a6b4fe1cf720031f40524828ade3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hunimi-satu-angiafiug (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 079d1a939a26340e930dd2348d0af9b86a7182340055476420b58a2ab5162c44 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nuyar-id-aiforx (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 92f5ff84936d40c1c25f2419f4542d6477407d004dfcb0b37e1b22b34ce373c1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sumpel-poke15 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 306a50322bb4a61c19b928ee520717c94a2634b2fd74a5a2d13b0220bdfb7a77 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...