MAL-2025-177715 Malicious code in polymer-afifa-goma (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d12b54ce7758dfd689253ca037649e9e846d5f8acb6745dd1dc1f6b9f0948aef This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-172668 Malicious code in aafri-zidan-tea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector eaeba19459dfa0b9ada52fa4acabb7bd0a3268c5c3ae1a45830fb93b79118329 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-175333 Malicious code in kapvino-sofgdi-ugafaoha (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a2f563b0bd7e5b0799a16fcc7a7ff62fc087398919af8ec2e9c1c488cc143dc7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-172658 Malicious code in aaabdi-putri-tea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 609a5e733805bc24d9a21c4278251983e46a45ee444adeeede671dc444ab52d4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-177631 Malicious code in polymer-afaj-ratfavdaf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c6d4d76f310bceb7b888006b4aa15dfc5db320b5a9ef597b208067099992960d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-172449 Malicious code in nabuf-otimon-gsaf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5d09244734b6d0a2efc334cc6a308b88aca79511aceb155713e8bb8f5b3e79b7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-172144 Malicious code in aps-ledang-maanassa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7540d8ef41409bf9b4f0220afc48bb67f127bfeea9b9059a61ad1f915fdc215f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-172538 Malicious code in verts-otimmo-ffigagpgafog (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 37af971a29cc9cd531bea9378f3982a5f10eb7fbc394526a47722fe2cd5f97b3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in marianabarbosa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 337668e0dea81d24037d6f489ada5791f9869c1356210345666d8c556e4f3eb4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-170884 Malicious code in anikapatel (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 390bd89273617d3680e7abf0cb3e618e3fe9af19d7880ad10d6e1ec04012996a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-171567 Malicious code in meteorseer (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 643b48655213e56ad9709ac579d9b720fd41e6adca804c80579acc5c40d071bb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tusya-fass-s3a (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ae745b4a08c6134186568192b568f9c79536557a55ea04fe3e0f4adedfe4920b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in maalasha-nut-beligol (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fb1bc6c3f3cb50a686ec57e9e987671166da694c868a5be2acf30e57010a5894 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in intan-80 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 865d04b4b677a6a39047ee5cec1e542211b9ab6259297797c3bf104703289ec6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nokirane-asaiggfaka (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a0a7a55a3f2040263be656d02dc5829d5e080ecdf3468e2ec72d9eb501b694bb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in manadsi-sdada-midadar (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e5a9eaa99b2188b2808cf7417846a82ee33db3bd4379458851d8f5193629278e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in arif-poke91 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 98c3b0d40d239ac97ddad3c8a9624e0cbd111e33061517e2e46cf693aad60bb4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in jelek-rasismem-ba (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e035727eb055f513f438be35c968c7c6dd8eb7acf79270815e93d92271630ef7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150686 Malicious code in @miptaa02/gfe (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 25934ae8ebb54ce00e0222112852216c28eeb822b54dc35f0980dd430cd8063e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-153576 Malicious code in avomainah-frausu-oau (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b41934c66659950cf2745c65d623b0ee69f922928b9542863615b81dc560925c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...