MAL-2025-177417 Malicious code in poglymer-ogmimh-avigpag (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 54ab65a83af00a5567026a3deb2770180c139369b5d241e1f958485dc24ffe55 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-173948 Malicious code in diva-banubo-imuba (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 005e3b3113ae0b00b785c8509fdf628b8f8b9ef661b6bcd7dbcec46accf2cdad This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-177478 Malicious code in poglymer-ognagah-agsshhai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 31a25ebfb720670862f56ba480b311177ad051c597306fd24e0a7ae69a10b687 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-174548 Malicious code in haritono-poke12 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 372fc89aa16683e92a9def2f3ae63ac06b472f3e0c9471081735a754d80e7230 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-175489 Malicious code in keke-poke7 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4faa0f31692af7ac442eb0b517edf370ff7d922990c864407a390ac8e725d39f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-174559 Malicious code in haritono-poke22 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dbdb4d787cbe00409b48d9c3101226c8937befd3ef122a3c7658b1a15645fd25 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-173601 Malicious code in butanaih-afsa-darsifafai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2e7d1b395e7d845138a08e751fab53e980b9aa3ba71449fe9fcd795225e0748c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-176997 Malicious code in nutravaa-nutard-nduatr (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 32bcb32cc63a0c86a7348eb2855428c531c3ea74a879802a63a4db492bef7424 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-177852 Malicious code in polymer-avof-agiafo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e102de7eb146f49c54051146467955c8d983f065649f2cc64c31353e57235261 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-173632 Malicious code in butanaih-asafui-datajufahuf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector da59d7a006f186dc25b973f9527cee5b7f70b34519b9f50f7a19174b28663af3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-176345 Malicious code in nokire-kushina24 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 81f0acc5411d212ee130638ae7b0f50851d9ffd0e014af4828975f4bb02d9a61 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in divata-tugabi-ivacfu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bea4447591452880b229dec26d2cfbbe652db695925eea5f7df6a78c788e6da4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kapvino-sffoi-ugaha (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ce46cfacbeb8c27973dc3662b340e245f635a027eebd30452de67dfe6a401a46 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in indah-poke24 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f1e4f7dd82faa329c6164fb6e44410b956f6357f9a353b6ed62a8f6364b1e69d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hitachi-poke33 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7a689a1544cf171f25b7f8ad244ff5f797164e9b053e70a3b2458f4de446b70c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in miftah-miftah3 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 570868f14f6427641e1749c0a000ef2918d494133a3ceb1150e01c9569ea5109 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nokire-tanjiro2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 96ac29e63878431601e0035d4a770e104b172caf89e44b1c50d8bb4c27260c5a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in polymer-agiagaihha-aftfsafyag (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 284815cce4028f3a014bf457e4048250b6f68c436224e8b97747ec41260e2b62 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tray-pzp-pom (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bb3d753dfaab1f7cd55a51a5033f44d4199abc2c5be30266454b7849c230fcaa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in butanaih-afsfafi-daafigfif (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e309fc6b076251b203ae614a2af7e1055e9d90ab5459fdc7a0d0f0d4920837b7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...