MAL-2025-177203 Malicious code in poglymer-ogaguh-hiagagn (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2a922a5ef7f6434f1be39aed43daa66cc9d0a7b32c1a49dd557de2006a9b16b5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-174962 Malicious code in ira-23 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c05b9b1000d5f9be9e40ab5eb2d9fb3fbc1757fd62c2acced101f7d1fb24e367 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in poglymer-ogminmh-amamofoja (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0cd9cd810fb815d7f416569d07a834901eb5286c4613e3ef975140af048db713 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ananda-poke3 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1db6d4c53b7eeec2b4d5ca8286943649f36cb4dcf0d324e9f23edc35fdbcbc91 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sumpel-poke23 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b46506bb402537bcc021b663aa507a7a8c7a1ba2ef8877cecb4cf3aae70158c9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tray-iutup-npusadya (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 494c8cd2b5fcef80e56ca888bdeb87e756fc05425470ffffc14d264657a7ae8a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in polymer-asia-gifgaf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3e8f65f2887a0afa780176bf72f7e42f1dbbd50f034464c4140a5baaaffaf52c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nuilva-daerde-oagfalif (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cb17d20b767e5f1c2cb61f1abf5aed5ab6b0f8de9b91c33cddaf99a74e6ce8f7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sahnim-sati-adagoima (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 01bede1aae61ec2a19ed390ade5d41c913062301bba7fb3ecb1397b3d40e19b8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in butry-mutry-ipurt (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e72e6ad9b37b84a4724b43975718c80c4780e1a307c75a0b4b0e4b0001db1187 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kupaio-ukutila-jok (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b81fd739cb8751964bc9bf647d048e4481c52ea3ebbdc76a9955c1b4a20261e1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hokage-5 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 17c4cf24013e8e3bd6e094feff3d2a1d6cb26210ab543ea4a06d1ae5d2b5b088 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in polymer-avonnf-aboafia (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0f34cb88a4f9fdb6891834b7407de539516be2f127226b04aa68e9924837d7c0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in keke-poke7 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4faa0f31692af7ac442eb0b517edf370ff7d922990c864407a390ac8e725d39f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-176673 Malicious code in nuilva-bavaim-madibavavo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 53d307f020336ca9956fd0e60ae30f3e17ad72ab21730e0c33bb9b0d48ba0db4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-179363 Malicious code in unimuna-safiagiaf-afcuga (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6cacc6b04f297a304e3fd29293c085f16633ebb14da7ed59d831b9d3c249aed5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-173387 Malicious code in buta-fbna-gafida (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6d2cb6f0cd0ae98e4955629d863b3ebc3a22af1de76f39dc5f17a156a98a976a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-179314 Malicious code in unimna-safafi-naisffis (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a89f9e9b5c97a52dd1b753de7d8e1397d162ec0a3a7bb6a48ce1795278cf695b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nuilva-bavaim-macoucvoa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1549a464a29c7c021793b71b0a3baae98190aa38e34ce7c7557c55b8b37d4632 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-175036 Malicious code in kaka-poke1 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c3701e5021809c7d06de3073c77a81b5dfa51b1b6d8b17814c69a0de1fbd527f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...