MAL-2025-177743 Malicious code in polymer-aghhgiha-aahai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 250b112f596a5bb079c19ae7cac9440b822b521992a9305dc16ffadda989c913 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-174561 Malicious code in haritono-poke24 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cb9bfa6dab4dda6d005504aeb4376521adb6d4286f4040bc59c09aceb04f4ee4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-179135 Malicious code in thambi-yug-berts (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f3d611ed6e620e0d6ec5df092d31171a1ebd1f7cae506b24bcfacf87cdadfcf1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in diva-banubo-imanumbai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b117cc063f77af53344e303d4c8cc085823cb8936fe5168e998bfd2f9a23ef25 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kapvino-socvnvi-bodaasobsadfgu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8025b597dc410a296eacfb033beef616af09d3f4a0c663643d20fcc47597b7fc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kupaio-ukutila-jokiloua (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7adb433fe17da21678a7aed11a101e9280d4b0ad0c876859c977684619fe00de This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in unimuna-safiagiaf-afgucuga (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c294da943926854d0b2279353870f995f3332712cd92cb2b36fc1aaedd37ad5d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in goodafin-nuig-gibafgita (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 53289ba2762c97469eade866df447fee2d8175265a46155594fcf2e29bd654b2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in polymer-dadfadsid-doraema (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 09066d3de84f75bad6fd93197808b1fc5b32fdc1d6d7e674d458243005d5004c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in buis-sunina-mubana (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8248c05c4e2065670ab84204b8e2ffb15d0547a90eaed8938a9d5a68d30446da This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hitachi-poke88 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 57a45b58d3a5594cb743ec070e9eabfa950860e930c6f1cca3b54b59e3c9ceab This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kupaio-kulaa-jokioimalo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9892681210432c6b1774ba629c23f4dbf124c92b034f5e0c80462a4de0cf5b6b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sumpel-poke7 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector eafbf55daefe19b5f9f9e98a22ebc4aaa4731b6535ddf0ef234207923f527dd2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in aafri-zidan-tea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector eaeba19459dfa0b9ada52fa4acabb7bd0a3268c5c3ae1a45830fb93b79118329 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in goodafiun-ta-fgif (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bf273e127b659f3f9968d836c85d2e8a25dd5fc9d69f15f1f75a9fe3600d3f78 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nokire-kaguya8 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4498460026131928c531fde04e8a74796f20aeecd1da5013f5ff59f4719ceb50 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nuyar-dad-rofdaadid (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1f737ce426f8886d111837fab3efd59f3c78908ad0de57db7ce23d6ad9bc326b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in goodaan-ngusafa-ndgia (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cfcad3040dcb5b58602cfb03b836d973f940af6cc286e7b677f91ec8da6b03bc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ramadan-zidan-tea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 95d1e48f8547714e8ff641039a028f508d9d98ca90970a178f9e4ecb91441232 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in diva-banib-imili (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 801d0332aad7a525c05d1a40e6782d0a99ae234c8342df1fa8a3724b158d00f2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...