MAL-2025-177284 Malicious code in poglymer-ogi-aggfkaf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fea729b82386d0e7637c4a5a6dbcb457c6dc02ac537c2ceb4aa50afd59018628 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-173122 Malicious code in budi-kontol-lo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e3de69ff5e6770b16c2a517078521cdc420e32a60646c94ced87ad1dc4fdc146 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-173381 Malicious code in buta-fasg-fnda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 82bab65bc0a322680f7dcc4603824e18d186751ac193a7abd37300b582727549 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-177899 Malicious code in polymer-buya (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a5c21098ff9fa8981f1b26aab19a78e8c0e6d1ceccec3a7f1bacf7c9c7bf840b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-175761 Malicious code in kupaio-kullaa-jai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bbb55ccf7bf669ba76fddd49d13911312f0ddeeef28ef87d50ec1479b5014336 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-175203 Malicious code in kapvino-socovni-fafgsfsgfi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a338ff772f928275da58cb8bb99a6319474497376e36f3cba4bca9502eb244d9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-175442 Malicious code in kapvino-sovni-farsamvi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ea34f114573fd81529fb127a2bee057b1a28f1b6dc3c97f7d3ec9855cce54560 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-177186 Malicious code in nuyar-mar-afadaffn (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c9503ef328ea65a923ea095f78e86ec607c526bb921d62b4d84f01c94a5687d8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in anidata-hadits-ripa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 13bb64548ba3e4c45860d59bc491ef203b1b2481e7ac0ed721300d32e49e8ca7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in miba-nursig-nutr (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a944a8414a1b49c4ddc5a2846b694776746af4e579865c995a5f3446702e746f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in anidata-hapdits-risadipa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 92728839bf745c690f7934db6e63440fa1422eef4a03e856fb2c300b91f50fd5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in polymer-aghashggiha-agahai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 78e9f4e4ddb8200ae6dd3ba7e395d7c8192a4b2a6af7bf9377421a69ccbd71dd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ksai-kaisom-olomao (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 56c58a1124cd539effa10c21aa9b4ee99b621bce00c570d9e0cc2ba95103ebee This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kapvino-sommoi-ugaha (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dc6e938558e06047918c7a8283a9a7f7523a7af668ff87eb388bc9990ad5d9ec This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in diva-banbfo-imunggsai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5d7876c6dfc2346864cc4b870db1615de7db7fbafe629cf5da7b22712b2b01b0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kapvino-socvni-famabavpvcavnvai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c1608b94d75b68aa558da2c6c7d80b5e63ede6541591a2826eff9d69234a9a4f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in polymer-avonnf-abdma (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 94cbe4c4ca2004a9bee6530e0885f85f89d261c7db7d629c8c916ce87e68e58f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in budi-ko-rusmaya (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 061573f2a4790f9bbd5422f4a717684a629bdb3a8bc624eb80e49105181295bf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in miftah-miftah1 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 12cb3fc65310dbfe3f4cd20ae266000d8391b6d2fabc15a449a2cac6f5c7c5a4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kapvino-sofgdi-ggfua (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4e40222bfd8d8413b0ac826a20df914c84bddd347df8c0f94ad8f9bf5112c912 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...