MAL-2025-177751 Malicious code in polymer-agiagaihha-aftfsafyag (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 284815cce4028f3a014bf457e4048250b6f68c436224e8b97747ec41260e2b62 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-175500 Malicious code in kiki-poke17 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e605fc86fd02a5f01823754cd6540804ba5ec1cb90850bf11133bec7618d5906 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in teadod-mipta18 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7578a5410b789fc87367b76daab852233c2702810e05abe9f7aed45fdf0a0c8c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nuilva-baviva-munvavidzac (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8b090cae0753358fed2445a19ef22a5f74b0bb6fe2826972e797f08e4e408497 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nuyar-adamr-adaaa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 319f34f76cd886b5b8bbf3531364a47f4d1993bbd0cc305db91cfcf237b037a7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hitachi-poke77 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector da2bc5073dfbc665c2061d67be249eeea05b390ac62f266627afe22a24711689 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kim-s-memeq (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0557d6dec7124cbbab28a2b79b7bf3fc64b42611aa0deda8a3aaa4866802befe This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kupaio-ukutoila-jokilokluana (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2b0fec56eacabd214e9cfeda363f4e86d34f86a3234046bcdafeb7955448c2a2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ksai-kil-kaokoi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4bba1f5537338b02019443fe48f11cd7dfeaaf80d68cd875ac646293ade1ef98 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in butanaih-asafi-davataihu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f0a1f9eb0183cd139fef82e2b30567149bd931edb524a73bd7a6624db7e6a1ab This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in polymer-avgof-agifadfo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aaa31c42cac1603dfdc0ef90a3721a3f16f75f3aa797dd71d9eba617d11635fb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in buta-fadsg-fagvguaganda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e2991aeb64975bfd24825935d34c2a24cc8f4551eff742f18eb7c2988cf7c2a1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mufabafgi-sufuafi-cagasufai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 690cfd867614b493377d3cbd23de8a8795379107d472dbd56a71a47ee6a386c5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in diva-banubo-imanumbai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b117cc063f77af53344e303d4c8cc085823cb8936fe5168e998bfd2f9a23ef25 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hunimi-satihu-angafagfa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dbd172eb88049ffb9578e99880419b2fa5aa93841f1d693d43eff21ec3c7dd02 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in diva-banbo-imunsgai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector eb41f66e0c0c1a0fe722ae4ce7324b9d57be1ec79d9d88b8b05f0ce2e84d0791 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in miba-nursig-nutr (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a944a8414a1b49c4ddc5a2846b694776746af4e579865c995a5f3446702e746f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in alvino-19 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ac240abffed35713dd4670b4a549fcfb1c6eecf4ddca33b835f3f39d0343c7d7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in polymer-ib-agaiada (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bc7b044b19ac241af93137e5d57be1f8f90f4dcd2913ee238ad28427496490da This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in polymer-afavof-rafvzfgbo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 80992b298c28da1df79349c0375e08cd887ebf7af35b98cbd1f97f38e3948ce5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...