MAL-2025-173031 Malicious code in anita-halaodi-misalania (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8f8b1702971d7efe08736ab8c151e5912fdab5a80587e8e48c55e20d7819543d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-177673 Malicious code in polymer-afavof-af (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 84cd1d60076746340a2d138a27d6e47dea21daa74cffeff968595737e36fb6a9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in poglymer-ognbamoah-afiavagai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fae60ea6f7ff73a6b0bc4857aa0073a192849fb1b1b4d60a323fb4a98afb66b7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kupaio-kula-jokosi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 45c50c9631c4da1ab18c750eaedcee0be6a2e82299dd1b98f3f4d56f653c0e05 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sgoodaini-sanuga-nutabaa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5acfc27b966e19fcdedc60238a5b29a113fbcc631931f600d9fc789cfdc5d1a2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nuragi-sutau-gaviog (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 20e419f29ccb5ad462063646daf78645b00e07e8714909f5f18789a712e337ab This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in polymer-gi-aga (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2d7f1173e914293848277dc10dd55f818e7011f187015e39d1612aa37e46a612 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sayaaaaa-salwa-tea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7c143a79b2dcf4e106492a472525c00e2f611110380867b1df13a2708e867267 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in irfan-poke13 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 319c238258bf65ed35aa1d8e9874d70bd3732b9fc98504d81df08da41d88d22a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sahuar-satia-faguao (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6f72c777b4776325d93f80493965eae4ed4d203d182169cb2679d60488078db1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kapvino-sovni-farvi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fee891e0db4b21ab22e6dfdfee333d319c16dc4134ea9018227aaf04f4baa2f1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in digo-kaimi-aiokoam (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ac5495b7ff37f9c6127675f8b50cec2bcf5d5d4e5d9b9104673d9bfb7065f7cf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in polymer-ib-agaad (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 65606088704655e643b8ac706cee3897e996eb3a2fa4f400388e1cf9545736bb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in polymer-aavof-adadfo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bdfa077e626f189f70ea376feafa9dd7407d85070ef660eefe0f50d7c0581c34 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kupaio-ulokia-jakaofai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aabd98d931d63618ae1d99df529255b5862bea427b71e1afe751d4210cf9206a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in zaskia-poke21 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b4f9d996224353f6e1778107f719c0024707f240d65d28412befada48360fa7b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kim-jiwon-mem (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6fcde3759088b77d57f90920cb6f1f816139d5c49f056cc9bb6b3cbbc8b8165e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tanura-sui-dafunhgai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 289eeb113b8a73586006b89e652b7eaf95e1c641ec4e00fbd54d0ddd965bef43 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kapvino-socovni-fafi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7ef50e15cdf53c6dedc610fec50cecc627ca1c8f67a6001d44ddee47079e9e3a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in goodafin-nuiya-gifa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5e2a35e628460ea35948fe6b9d029814253cce249bd70459f9d1db895b0635e8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...