MAL-2025-178139 Malicious code in polymer-trusd-reua (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 48825aad87c53d5f57d2d3115b067cd58eee2c82fdf1e2f7f693585bc14c803c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-174144 Malicious code in godi-tua-in08fdtfdc (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7f8a5160589d122a0d03920dc87367ebd02462257ba9f6f9fc50bc41b38e9eb7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-174431 Malicious code in goodai-sunabiu-fnu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5d1eeac9ec298d0a1f0c02a9aedfd632a662995557d510cfee9cb554320a6bb4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in polymer-avof-agao (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8b826347eda7ce3d668cce6127b6a782d0536b22c5e37bdeeae392b403b48411 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in poglymer-ogmih-afiafdaf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7bfdf62bd2d08c6a6d58b61bb2b24f0e9a360c2562b1d9aa1d5e8e4f13338df0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hitachi-poke53 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e363547f417a2422fe0dd24f048dda31d8cc46f2a05f193ed8058a4ebb67c71f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sahunim-satudufui-fadabidan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0af777be0cfb9694951110a242886614f947480349606728bda09169c7cc20e9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kapvino-sofgdani-gagofafagfua (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5989f694330ac641f6bc356802a34560b47ace1f8c732f434a074a4cc678c65d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nuyar-amar-afadaf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c6d005adc004507c3939a1defa0825cca618738fdaf7740e3563f6262de0d213 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sahuar-satidaf-fagub (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d44958e3dd2863021c62d53b7d8ff7050223475bd1e2baa27f39efb160645b3f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in poglymer-ogmimh-avigpafdoag (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a2edcbd6c1a3cb86aebf3e402f2f4722c123d6e4644d751e607bec66cea7dedd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mahiya-sutynu-goi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e348052341d50e8c1f59f3b886b40a0676bf88bdc26abe5aa03cae9330a1627e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in teadod-mipta12 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f3e4efa235f62f0d5ca0d48a658898158345aa36a390badc6bad9b2895723353 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in riya-50 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a6c9f3a45c3e9c1d94d6a489f9f8291d4759490766a68875271795c7806409d9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kapvino-socvni-bofafni (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 657da921da7a19a1b87a7722a4a8ff374155c4cc2be49bc49999e5bf6a9b18b3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-176369 Malicious code in nokire-kushina46 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 00a215168efb4c76502829c24236b601975993225945cc8911a164b355f2abb3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kapvino-sof-vas (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d22d0f08eee05b41c5123e15694885a807316cda4c4c6d5ef97665602ab3f261 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tanabufir-softfai-du (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b0e2572a53ebf2a4c5b3929342238794811cf1154b8c26c5761559df2efe0d34 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in goodaan-ngafsa-nafuagi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a05d37e73c5a2a7863f6f9f091f7802dba78392704aa0fc0bd7e669a73d7214b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in unimna-satgb-naigubis (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ce34145344df432a76c3c5dd014319c6ab1c04cca29e566d57e61f9f61284813 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...