MAL-2025-177955 Malicious code in polymer-gfhgai-aga (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8f82b0c042a661f9c2fb7fd7ad22b496b3ad5249702fa16c41e678b6a80a13ca This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nudela-gagaggafafh0afhf-gafsafoai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 75310d9c19826d9b565a5f4a3d96792a119fe74436d3f687a4bcf7e1d9ec04ea This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tealove-poke38 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 249405a26e7a9971e6ef41ca964f4069d86058f8f926098b748714bc7cfb9e68 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @mipta1/guyk (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e9c3ee0d418f7af2f867e220591ee77d064cc06d6e1f08a10289d4f690d209f9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tealove-dana31 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b7b8904871b495a9483ae0d914a4ba8af11e1298958028666f40b8ed770f1e37 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kapvino-sooi-faoagi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c81d4c406e728118a6d16129fbf9212dc5db5d14e8863f4ce51d698a50f66fdc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in teagood-nakama81 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 106b59ed9386319739b76fcaa2c70b44e83fd357b90725849b117e99457edd84 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in abiuba-aviun-abupumabavu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 27674e782d236ac05aaf2b6054fa3015d78872df946b6f12d62d0ba58c5367cb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-158508 Malicious code in lookingan-nalako93 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 041c22202ca8e0d97ee3572cace72fbc77e487d83e2cc16d19c2419dcc687108 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-169653 Malicious code in ucok-poke33 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 197c054cdcb0883996fb2de94a97c1e447a898a4ace5a845d9d89d678a338efc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-163317 Malicious code in nokire-rara3 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b487bd94eec53c23572dae0000f0be3d8f8d4814f2879c7f58353eedbdc07ebf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-155846 Malicious code in iba-otanai-umaibtu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1eebf1a93f684e4cc5c0cc9152898129827c391ce65685b05fca7fb79b8e01cf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-168270 Malicious code in tealove-darknest15 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fb6974a0529ea89f3f8601a2d9808e78d4acec0308b7731b4c38baf058f2dd2a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-164846 Malicious code in rinto-poke70 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 274ef0cc6614f14d93608b2ea2bd39c4a868d069b5c5d9a1ae7fca26f43216cf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-159366 Malicious code in manadsi-safad-naisop (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector de21a9deeef6f9f6e483d0762ad3dab5979d6f1f1e0dcba8bdcb494b3fc107db This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in careful_wren_blush-12 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bc5695272820a4e805fe88080377b4907d706724b525cf83d9c1c2806ce486c7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144986 Malicious code in mini-css-extract-plugin-passport-centaurus-eslint-plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 37136266f9b1a7e07941b1535dd53c5091980321a58539fec65f01dbc02bbedd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-136671 Malicious code in rifqi-tahu37-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 10433949d2726c9ba85783e047bb1e1f98181a43db1431530ffa3e4a2a52bd14 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in horrible_stingray_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 94f5f764f1beff158d84e1a38746d85c2d0b33d44aa595d85d4617172d801b8d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-135149 Malicious code in lina-bubur25-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b10cf065b783d05df7941a58fe6432385c5a072e5f493bfd521c27580c111a8e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...