MAL-2025-177834 Malicious code in polymer-avoafifa-fagga (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8134ea32b1ef1075e16e87cfbb292992a45d6a86257fbb8913ba5ff92d4033c9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-177025 Malicious code in nuyar-adair-biuran (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7d17a4f8ae7bd35c10950c793b94373e3eb7f0cb9e4e29abc6092fcc5b2bca18 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-174397 Malicious code in goodafiun-nuiya-gifia (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aa2b0b865ae102a2851e3498ab9d283cb7e5f7195032291979bfe276303e4981 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-173283 Malicious code in buis-suninna-manad (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ffbd33499944ecdcd8b412e1d783ce4aeb0b163156fa9b62565ce6d7c79dcce9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-176429 Malicious code in nokire-nakao37 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 34d72970096663db00315b727e21189dc18ff669c794b93d1b1affa5cfa4bfa3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-177720 Malicious code in polymer-afifa-gomagiaaga (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e901a938207a1ef419289392accc7bb1b6fdb545c26844f8705845fa69e8bf98 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in anita-haudldi-mil (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 79fd75e7b9f7d1723c590365e6b97b08c2bba1d06d141a6671b93ee0b495f21f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in munufafai-suai-cagafifs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bbe7ce27227b4ca8564369b3cf27c87cfc5c330edda061c2913bcab59fcf5c9c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lia-46 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dc0d078e9e833f805c894a4db1cd2373faf6c273fa9726921d51bd14e7284a3b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ksai-ka-a (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5547cf1d26160cd1ea6c9e187ce6cace523bd4d3d72e3a03cb53af11e8fe1569 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nuyar-id-aifor (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 735aea5534218ec7a9e19f16a2022203983c2152aa8f8f17bd3ede310e043b3b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sahuar-satidaf-faba (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 255431fa5016370d3a420e9676eeb70d8e72c99a83a6d5c0e5063ef6b5713cd6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in aaku-lia-tea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 707693d731a613f7f78c218aae2d24f28bdbccb7b60871d44c7c8a312dcbfe8e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in buis-sunia-nafamana (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3d58d3bda75e5d6622190551d64565f8fa9267473c1c95cfda5285e212072f10 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sahnim-sati-adaabia (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ca938d4add29091e7ebd146af5557fa6b947f63ce5677511e8b2f971dfdec69b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kupaio-ulokia-jakalokakaanaoi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6241768892a230ec8cf9489a5d2f4644ef7f01cb715008392cce14c21f692d33 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in polymer-gibfa-agagaada (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1972910f6bf6eedaf91bfaa6d4dca4b379c745ded80bdca22223bae745bf9f0c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hitachi-poke18 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e3401b57529ab84fbf4e914376a692548c9dd237dd3762b2bfa00f4d1ce658fc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in goodain-sangunu-nutaggfaiga (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 173982a4479cded40c3d496e439be2537e136818a87878ed505558a9c7095ca9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in butanah-fipipoha-pafasi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7edd82f7630b2d7a9dd2f29b0d2694e73e583e4819159eba273169e615a74d82 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...