MAL-2025-177866 Malicious code in polymer-avonadnf-abdma (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 45dbb0321d0fd859fb9cbad13b13dce986703c70e293d56c18961f3325fbdb2e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-178313 Malicious code in riya-32 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 81ce2cd2f1872cf2c3104161d6efc27f5fa26e2b33dbb47f7c4d15a018ba258d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-173409 Malicious code in buta-fbona-gadda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f448da2ed9d18e22381f7b2bb33a0aea0e02c8ce3321ef2a00f26aff94367e5f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-176713 Malicious code in nuilva-bavia-munvidzac (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0ed78a404587188520b833cbbf1a2464147db9f10e37f25b777d186d1bd9cffb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-173099 Malicious code in bafai-sunai-cumagau (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e2266cf9fc6822bbddc534684ec9039c5e8e689190b161abe5836cda8cad7c54 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-179017 Malicious code in ter-sohyun-memeq (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 71c0f3f00ae1d3b615efc0f1fc33123ce14587fbc6bbf1291e52cd9258e59007 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-175548 Malicious code in koko-poke20 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f0bd46c11d25c853b8baea11a092b7037039b0f0da2efa84d5adf58a43ceea19 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-174615 Malicious code in hitachi-poke10 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector db30791a76c7103866fb2c858d26e15fa59bea0250744e5eca5220d96d948d8b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-174579 Malicious code in haritono-poke40 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 336a0515e95635582049950f9e033463edc064f5aa5311e84d63a69020d089b1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-175352 Malicious code in kapvino-sogdani-odgafadasggagu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ed1ab7ccdfbe3a8c8946678257c21e3ddae19e798e98a641a1b27a858ea9c61f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in poglymer-ogih-gaghuagaga (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 805aa049cef04fe54ffc9fa48e22d0f9af2ee87dab84ebcce3b9dd5180274828 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-174022 Malicious code in diva-tutai-inava (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fe3623fdadde6e61bd46dd97360f12631ca86b6c1220c3935b7db5cc459976d3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-175489 Malicious code in keke-poke7 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4faa0f31692af7ac442eb0b517edf370ff7d922990c864407a390ac8e725d39f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-176345 Malicious code in nokire-kushina24 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 81f0acc5411d212ee130638ae7b0f50851d9ffd0e014af4828975f4bb02d9a61 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hitachi-poke33 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7a689a1544cf171f25b7f8ad244ff5f797164e9b053e70a3b2458f4de446b70c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-174425 Malicious code in goodai-sunabi-cufaanu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e60c3649034939f2d42f0a1c6fe80ac108f0fe7aba2746841a39f77774ad57e7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sahu-satmug-fanufaf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 47395a5a340e69e7f6ab6ddda80b1c8680a29e8322aabff3e5b3cd9afc0d7bbe This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-177747 Malicious code in polymer-agiaga-afafafyag (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 295afd1a492b54a4a3262a8f646b4d5190c524c707133cc666318929841494a0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-175420 Malicious code in kapvino-soni-fuvdavaibova (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dd32218ed0331f95490005525b09dc81227434ab90aba7aa4c81e5c2e43eb448 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-174011 Malicious code in diva-turai-inusunaja (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 61d7fe164ec94d30c967d78dd4ddcaff54c3721f8ef79e3b12f7cd6bca322eb7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...