MAL-2025-177711 Malicious code in polymer-afifa-fasaga (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 56d1a4ee739cc7939fa78e199a01d85f2002bdc9c1a0df380205d25bd044bc91 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in diva-banbo-imanaai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1b980adc0f90446fd77db52b16a82e259ab80e9989b12b0bf10d65311bb9080a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in butry-yust-mutyi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1eee2706d69768335f234f0d981603e6c07016b02318932760846f75314c58fd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-177411 Malicious code in poglymer-ogmimh-ammfaoja (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c7945570bd45d1049ad694f898c0f348ee960035e113ba2aa8b87bdba0b1ac6a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in qasimabdul (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7b1f8dedfdb5d1cb7ccec6177f73d89969859dcbe0c801c729c40ef259add817 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @miptaa02/olaaa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e49f8a463f8eca05bf116efb6376cc710471d8a0fd2f1ace4dfe5ba0a3300f9e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @miptaa02/wedshj (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1485f8b3d28aba9ec74e6c51a7f11a29a7f1434e44ab1e01d8675053b349cfc2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150401 Malicious code in @mipta19/pjr (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fafa1796ace032085f476c1ae3e98f82fe71ed466f2e989fd00fd0bfe44bc1e6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-169128 Malicious code in tobrut-naughty-nubliesp (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 15a181a3ab4dba979530f420a786f064ceb158cc906e5cac6fd72d8bf8388c10 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-170305 Malicious code in verify-ain-sulapaia (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dc43292fc4c039a8a4970b3b6e3103af46600f392a6c85bd54b225c690abe187 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-151991 Malicious code in aibuna-mobiuple-amara (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9d9490eb1df01bd6857b386a1611e703f9e417cd396d4d6a15d4ba7c71698b4a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-154629 Malicious code in dian-poke91 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e423266b25e8791caead1bd44566322f4d2bab17307028295b3851178e71fcc4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nabuf-ogauof-dofuafsi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fa9fa072ba67025f9cb445db67f058fc811ae3f096c573881f77ad19108a37c7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in technical-albiko-tavban (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 002a19dbbe1a86e0aa7bc8657ef1be32ab118655126f7903cad51d68531152ea This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in avminah-fagmas-diogaa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 26b4b92b129fe9859e15b8e69bb40b5ab255c121e5d51d0e2ae4682c558584b9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in muklis-18 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6a1396fc9f87f7488d8eb1e15d025ecdc9dfb848953edc18126417bc544fd259 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-153446 Malicious code in avminh-afogofafafi-faug (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6aaec3665038b1a794a5c5320d0885467c8528f72e178e580d67cc8e1c41de24 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cosmos-antares-avior-hermes (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 617d6e5eff2b19a1a89297c4b75094e3aa4bde467ac80950ff66e9485eabcae9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in buffer-nodejs-native-grunt (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7bdfe7b627e6dbe13e573500c4bac8abb0660f48ef88bf69c58ce61ebef05e0a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fornax-react-bootstrap-phoenix-ignite (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 19fd1f7f3c597a5a98d0f02b38ae7147c321a5db0e4ed178cf4dc828ff939ab7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...