MAL-2025-178123 Malicious code in polymer-tresfd-sdf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ee556898733c9ccdf1e45d3f170325bcf535a7af9ece4aaeb2aa2a6254b60daf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in buis-suninana-madiuo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e206f07e4745df3bab7291f748bf11b12b34b89904c4fa05550ef0e1667343b0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in goditu-tuamimva-diabud (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 67a190215345284146760451c15dd1825f043937e83e4c3fa7887c471edd866b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kupaio-kia-jakaaopoai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9cb32c2ee2a0511029a6da620c987ff58dc5f45dee0d16a04d22434f5c44b37e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in haritono-poke10 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bfdc0dd270cfd68c3c6bb10f696698f7ec985f4494193568c34b85f4e1e9e725 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nuyar-adair-bun (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 32593ad9d9efeafc6dd5c1ac2a7f1d042ed3e3270826c674e346c136479f058a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kiki-poke6 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4d8b3ca1879c379d993458af9fef2bcbfe6968faf7fec8fcd67de7dd534fc34b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in teagod-rich2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4a80a96f7703902428c8932638a50642d411729d792c8d610ba5def268dc3376 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in diva-banubo-imanumbai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b117cc063f77af53344e303d4c8cc085823cb8936fe5168e998bfd2f9a23ef25 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kupaio-ukutila-jokiloua (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7adb433fe17da21678a7aed11a101e9280d4b0ad0c876859c977684619fe00de This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in alvino-42 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 84905e0049134aa88ce02c20c29ecc1da8d5fc258fcbcf583c8298532de3645f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tearich-new9 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 471fcd3d0dc2753c742fc7c24c3bd4bf1e8d5748946da534d55671c77b07ff50 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in anak-jalanan-mdn29 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 20c4c6cadfc42922fba40f819eb2ad5ee38de10b62eb333bd8c70d9759e5e43a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ksai-kil-kokaiai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f155e886e9ebee4ef7bb89e87f16af877871e78127317bea0f6d26cf8bff9039 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nokire-kushiya15 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3f5d28bb6420f9f0e144ac494a7fb8e06e93be70fb965a329d89eca086b24782 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in polymer-trtean-teas (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c463be22b72880fe861b522106c736f551350588d059f946e634921ece45c78b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kapvino-socvni-fuvafavi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a2afa8e155ebe4ddba158d620bb6adfbe36025661c47606bb2e90d896febe24f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tauhur-sofi-ditota (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 162de5cec6d6443d3422a41f21b1e8d7bd016b873b485c9ae5d90e5e51ba8793 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in diva-tutai-ivabau (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d626dfdfc54970194d1ba2d3c1c606e327fae606f9e7b84f962eb9b88778fcaa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in anidta-hali-midadil (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7af63890bd282bf76c7d88ef28f73e5cc3a1854416302bbd3254a8eef333c76a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...