MAL-2025-177796 Malicious code in polymer-asia-gifgaf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3e8f65f2887a0afa780176bf72f7e42f1dbbd50f034464c4140a5baaaffaf52c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-176335 Malicious code in nokire-kushina15 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fb220b717bd1aacf271cd0dd0fe90b013e31692812e689ac15da81723f97aacc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-179381 Malicious code in wulan-1 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6738e894f79b0190cd778b9807237bdc8f3f34af884723f89b4e560849a13c58 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-176958 Malicious code in nurnua-sutif-dagayi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3bb1152d985dd9bd9609bc99051b3ab4fa91882c3398c3dec24415433fe64dcb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-178802 Malicious code in tanura-sui-duaafu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ab33c9ca60774eea292fe1ba78e2fe381a538d99417e9790ac79d3eaf01cae96 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-178182 Malicious code in rindaman-poke21 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cd79d57612ee6b358eecdb1bbd391dd9c40e42960af69caa078d892b50effbc0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in butahu-asfi-dufsusu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b89f5f10db81993b034f925125e061fff18bccfd701b11c629db1111e90bff9e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in goodain-nusaia-nufti (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ee86108aeedf1f8238b5e28b0c66e6f5eceb571ba29f0dd1b8e2baed3208122c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in anidta-hauli-ml (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9cbe75d646faafc8b8e14faafa03301320e6f75233ceeab6b378c58926ced2cb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lia-29 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 83839eb03b1027d2475d13dcb178480b83f1d6e156ec626783871df6b982b85d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kapvino-sof-fidabi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3e29cc7d941074c4b0607873ca6abbed4f1e6c62396c6410608565e7207f243c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tearich-new6 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a18a55c742066d674693fac46ce718483fa9f4c3578c07fa0cf800bc89d5ea82 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-176976 Malicious code in nutr-ersusi-vert (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0d62baf10900261bfa4d290230805700d227436ab09a31ba8855a6640878402b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in saaaaaya-salwa-tea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fa09b8fe724e839eb069e7910862f2aa3629c20f06b35830ccb7952319000de6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in anidata-hd-matsafdi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ff8bc040152dfd20d7334b428d8804fef743ac351fbc7b4737b29c142eb43689 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in traay-tusdy-paoim (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 27619ef97e7faaf9cdf42fbcb2a8c94afcf6401349575d0cca373d609e690766 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rindaman-poke16 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0607d5aac57a98c8f68aa2eee1abc12855b5736a173ef1da55a26c5a40666973 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in poglymer-ogaih-gafac (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b401f744eefbc24a3dfbc99cbe537caf178b0dc6e70eab3c27c14b5843d3326a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hunim-satu-anin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bb93ee181630b40e0a002bb071cff1feec402389ddb4613b0d2390acb91a42bd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kupaio-kulaka-jokioaskimalo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d59cd2f1baf57d3eb270514e83e228e10c255223191e15d15aa247aacf076c2e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...