MAL-2025-178019 Malicious code in polymer-ibb-sgahsdi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ea25f18766f87424980cedf2cb1c424eda1784ce06b72ee76a4b8b69a21ca270 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-174541 Malicious code in hakim-poke6 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7e1731652c7ed2ea415335c98ddeef1e05add6195690146a594cdc569101b82a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-173314 Malicious code in buta-faag-saigaagfa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c36e98b431fc6a63dd62773afa46c5d2db77f541c3415a91f98f8e7f3cca2eec This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-178561 Malicious code in sahufarf-satidaf-favuti (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b17bcfb7574e8df955101565263c41ba680bba6c894910153723794760b1253b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-176073 Malicious code in miftah-miftah27 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f845433a066d297a52944f7817549eeec58a4cff2ad59df296071c484346b9b0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-175020 Malicious code in irfan-poke8 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 956c6b65155cfcfffdedfe88fabccacb058f95711e4e3a35aa760d4a3498de69 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-179181 Malicious code in tnura-suif-dagai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ad3774389742534a52facc136fca4b30a013a1884d688362a97888f6baaef66e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nuramagi-sutaf-dagufida (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 282141d4440b54ebf054e673f7abac6abcc9b70486b70b5432fd7eb116d31b01 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in divata-tubi-iva (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e60c7f8182c6ae131b97957328e0d2053411979a491fcb03a9923a34909bfb19 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in afiasahu-sautg-infaru (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector df85738a25746e61d895edfb06dd564f5e3ae79e5312d375fe41c31bd5343bc2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in anita-hali-butaysa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fca7bcf63adc42f689066c34a92be10da63033141e638b67e47f3390833458d1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in indah-poke19 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7b5ec595a02c2413396df59594f1774ed28635fc8a7e0ceeed5a90c990ffb192 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in anidata-hnud-mafdidsa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ebb0a353215de8df8dc0a613bbe4cf0e79871cc07e902691a89742da0d0f1cb2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sgoodain-sanu-nub (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 20f47051c64bf0f27a7c05007f9d5ab235f5970223777ec8a9d8023436f97f49 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nuilva-bavaim-rasiyasivan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4add64cdae4407960388360bf139714bb32d05d7d8643de2f7a04f1f9043f70a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in irfan-poke5 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 00048366f62eb05643672c6111842eac6132c0076e944a1a99d19db8bfa7c544 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in thambi-busrt-vrts (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1379badd84bc7aacd2700a7ec20257e9714e5356c245ff03579f104764754d39 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in unimna-satiagobifag-naigis (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b4c591d8a4ad04a748a29faf33c86cc9bd97eb93c6d5d09a1b6a16eacd861910 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in buis-manuidais-btayad (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 010731b92fe2357c59a735fdf905106d294b81aefb4579acad49cee53481fb3b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nuilva-dare-ogoadaf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 57deae5406e84cbe012103109d05b087c3dcd884518a3d67acd67809a17a6539 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...