MAL-2025-177459 Malicious code in poglymer-ogminmh-bafgsig (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aa2cb85ab4f4452c91ce41eb4501c993876eb00c20e314c6fbf2b6ee4f5ab346 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-177700 Malicious code in polymer-afia-gfga (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3d0a3496c46ea8137bb05176878d81586c6d5333b30b3d33459c916bcdb3107c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sahu-satsmug-fafagu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e36d82f855e7990a1a11ab32e13aa2786242f25be1d2e6bf5678534c6acb8b7c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-179290 Malicious code in uimnaf-safif-cuagu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d4ed302640f4c0dbaae2ba624d005ff90ca78eca46cb298e956e81dc6ccb19d9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in buis-suinana-mamvfa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1d62b018e3cfa2eba75e5ecbafa02daabb75310e6c29ada746f516cd7a9c7363 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-174065 Malicious code in divata-tugab-ivaio (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4a7e43ce58fb3cc4971e6cdcea4482255752e892c5b7d9aa6d59bea314eb5432 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-172912 Malicious code in anidata-hadits-rifa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5184a94f94dbafed129bc6e90072a7efb581a78593acd9ec1a8abdc88c753640 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nokire-nakao26 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cf99e3dce8a31b95e2c9272618f88a6d1a965759b31adce5eb981ca4d5c6b45c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-178948 Malicious code in teagod-rs2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e1f7a46a53fbf975cd9ac7d21eedb985660d56af58bb6e6049715018a8f79ca2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rindaman-poke32 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d3745f20de1540592ad82b1421f16505afedd8e75bedb34f2d78facea84aee1e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in polymer-ib-sgahsdi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5294f388ad43defe469baecdb08ac2370d53084de23d5f77e37aaf6d842f222f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in riya-14 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d2b9c4245f85263c8511b43fe791b5d2bc5b87a5891587f29c449d17347e02c9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in goodain-nusiauta-nutuaagi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 19fe619406740611f7169b4334112a8bb8e9c7341231d48ace9a6c65354c291b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-179405 Malicious code in zaskia-poke3 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 55814364a30d90f33ef6b22d7b30af31fa5ecd22833671837fa8573679c26dc3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in polymer-avonf-ahgaafo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8512fc7c16b78e27718f01caa03b39c019dd1f3b648bb1d91eca634f9c1cd5d5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in polymer-aagfhsfia-gifgaf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ac78c5463d26def9bd7d9e1b9af25e9770c8881469f60d554352eaec03cec5aa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ira-44 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 31d174c3e93ed1da2e68565b31fc5e724ff2bb93451eb1f59a09de55ad3ee654 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in diva-tugfai-imaga (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0ccccd5885d42c1620467e7b9eca1514ecc501023442a94a25d337d54207920d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in polymer-adag-agaagisihai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7e39949804f05eaf9fe4e5f0d733e93e218f2739e2db1d82264a096418631d9b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-178495 Malicious code in sahuar-sat-faguao (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8d49cf69768de79d53a0087250d0af5c4a7fd0f268ce76832b91857fcea2c83e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...