MAL-2025-177700 Malicious code in polymer-afia-gfga (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3d0a3496c46ea8137bb05176878d81586c6d5333b30b3d33459c916bcdb3107c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-172953 Malicious code in anidata-hd-matsafd (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cd2c5bc902848bd7fee9d9c2d3e31c36e0e012f54eb104f48e3508f06e8330c9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-174792 Malicious code in hokage-8 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5746ad19778f537f4d27f1a2dba3255ad5503f32b56eb655eba5b03b8350ef27 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-174595 Malicious code in haruni-poke107 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b3715552786c70bec7d7d30ef6b259d84c713a12bfaacf6ce33e022dfa6c32bf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-176240 Malicious code in munufafai-sui-cagas (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 69763298a7b3fbcb1babda9b0d9dafa5fb1d2f9f4b916ffad9fbaa3b47bf47a3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-174373 Malicious code in goodafin-nuiyag-gifaftuu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2fa8c4098b218c73892703a594ba5367b68fba69f4380c4dfa06daa505a25585 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-177025 Malicious code in nuyar-adair-biuran (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7d17a4f8ae7bd35c10950c793b94373e3eb7f0cb9e4e29abc6092fcc5b2bca18 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-179067 Malicious code in thambi-iofsn-tersd (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 196774a5bb29c6a06e9e29f471cab46e15c0b4a262a31e5bed993540e7ed6908 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-176191 Malicious code in mufabafgi-sufafi-caafai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ffa24c3b066e668652f110f7e08783a064fb90c3aaff3e5611b9b913286e72ca This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-175714 Malicious code in kupaio-kula-jalalokioja (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7678b5fddbe821a1bf32ef99597a430f07447b2392d8f657ce58d7266bd40d64 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-173262 Malicious code in buis-sunina-mubanav (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b100f9fb81194e6a07f9febab777ddf80730cd9a78ba4029f6fc6a27e619f93f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in goodaan-nusafa-nsafidua (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fdf2a35d892b79e173e5393440731bd06dcc527ee65a2ca797f0dedc52b53b9c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in diva-banbfo-imuf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0568b6bad1e90dbba6e0972cddc6e9828cc47fd5928d7637d2f8db9c321d6be9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nuilva-avaim-rasiian (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 810bb22a3585f9efff4bd077d497271517961b3e7ebc3d409ee096aad47b33bb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in polymer-reyta-reua (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3c646a10c2247f5959c610a20de7ca489778cfa1da01a9e452d90e2666a10999 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kapvino-socvnvi-bofafanifavu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a9fedbb5d5c662b341e43b1be0ccf84e11fcdb8c41f0910a23769949ce3e5651 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in zaskia-poke21 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b4f9d996224353f6e1778107f719c0024707f240d65d28412befada48360fa7b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in teagod-nalika4 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 55986bb9efff8298f9538e62663ddf3be88d7167a57f2565bfa84abe55b104f1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in polymer-afajf-roffa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 08809ef594a1cdf47182a5eed82f8a4fba938870524c3a007e4a062247ee1044 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in saaaaaaya-salwa-tea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8bcb04b0cf7cd50fb9d71e55fcdc5b8f22e2aa088f9efe3cea8578bfb524aecf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...