MAL-2025-177412 Malicious code in poglymer-ogmimh-avgpag (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8545ea561a27ed3c9cefee3e629e6d1f5ec48ac64d8043c6ca8097ffefe7e65e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-174403 Malicious code in goodafiun-tufa-fgifi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7b2d707a0765f5cbbc9c8655b02c96bb99497570fa988d2e676cd0d0647fbd31 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-179179 Malicious code in thumbi-vss-budi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d3fabf03b69292801a5c5b1fa40eb540b20933d0b673d2dcf8916589e0f2f4ed This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-179206 Malicious code in tray-iutup-nusady (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fe1340054155ce91aa47c9834871d451da0ed26e7e1023b47096524eb70cd0ca This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sumpel-poke25 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 440486628efcb099562dee61bde40f559f662d012ed61572abbcc25503ed16cd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-172758 Malicious code in akuuu-lia-tea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 70adfef646c6c52ec2969c35231e491b4f311f1070787dfc6c2c432914161da8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-174776 Malicious code in hokage-39 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d29277841074ad498d57cbb0b4b1a56dd420aed9a44cbb207e58d778e28eec4a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-176313 Malicious code in nokire-kaguya22 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2296f7bb60518e396ce9d5e5ac2396ce855027f6af366047408860f99360985d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-172965 Malicious code in anidata-hds-matsfad (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e84fe80ad4a17b9fb4c24eeb0c31650a89335c6080dba247424a68162c30a04e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-178282 Malicious code in rintono-poke95 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f2c7b5ec150ddb4446ffc4f39c57e32680e9e8d36e9eece90ca45dbca0dc328b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-179210 Malicious code in tray-iutup-ubi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8363455a61ab1e09dd7d5a86bd4f60bd24802a66af6443d7a41120a5f74288f6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-175627 Malicious code in ksai-kil-kokaii (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 42f37a7095b8e842ab370b1baa79078aa7c8cac6cc1f1f29cf7b3dfabcb5b26a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-177870 Malicious code in polymer-avonf-afof (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 07ca73687406494f319aea337d2edadfe02e58d996322c6f9fff66e3724a9563 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-176243 Malicious code in musan-ndutar-munst (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d56118d9735bd9ede953681e42063a7830547ab78976e460e98660b7e84224f0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-173142 Malicious code in budi-sety-rusmaya (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ca0c2a816bab602584b1fc42e3ff486cf8e378393ed4a88d645f8f1fa4f612e3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-174978 Malicious code in ira-38 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e5c82cd57eb593f063a58d8aad219ec849d8ee9dea84ea11ac424d212cb59b02 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-177917 Malicious code in polymer-datdfadsid-raadafadr (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 947b55e4b5cb71dc61d153dac0be67267117d244ae9a365c89af05ad068ff5fa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-172185 Malicious code in augis-lepaod-matanidap (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 728a5426525d5c65662e56a82b6c0fe824bcc59b565247a110c0deca8f853291 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in verts-otimmo-fga (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4e4140ad4dc3a20f0c7c46b05f6d6f8a32046db3a79490cfd8fa434691cc364a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-172520 Malicious code in verts-otigo-nahgiaigfa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1c0cdb49c852c6e5f72cf868b9c79673ea15a496783f6c2c40dcfdb4311c1146 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...