MAL-2025-177459 Malicious code in poglymer-ogminmh-bafgsig (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aa2cb85ab4f4452c91ce41eb4501c993876eb00c20e314c6fbf2b6ee4f5ab346 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-174233 Malicious code in goditu-tufabamia-dtud (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 671b2303cd943629f106b47a12e01ddb73df79c3bdd98efe7920b5599cbbe4d7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kupaio-uloka-jalalalokioja (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector de9059a26a4d4d6310e3b2fe06d0cbbcfbc243a5f7f72e69b53690f33096977b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in poglymer-oghh-fafihaf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e032b93fb182fe85b86f749708cd192fc179edcdae7303c0e8df4cd8e3c5f922 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nurnua-suif-daganyi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ebd5c78f703f067eb1df840db55b84b7a10dd11d5e6df4bc2c448cafb2a60124 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in haritono-poke3 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5ff1d45f4ccbee1ff0c04806232a847e413ed210cf3605f596f6fc26a51b4f8a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in divata-tugai-imia (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7f81a0f5fa8cb7244e20e253bc9ab3e9675e23ab36e7321437ea44532c6c957d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in polymer-avoafifa-abofdma (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7204c02ea20141596e6745990b3a7e10ad389c60c808da682727b459a974ddd9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in traay-patri-paans (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8d27652ed5ac1a3d5d48133b579cfa172d34f132c34999e07d268ff5f0e3d42e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in zaskia-poke19 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4e60805a0c68674324abbb0da039994c1cec48cec1b631780261d7defcd25b40 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-174879 Malicious code in hunimia-satihub-naib (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4b6ce4ed8a2e3fa5f24c0f9a877d47ce430d34a83bac6c423ac5996cd360e236 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in munuafai-sfnif-cafuaguis (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7ceba61600292f31e64e3d244cd63ff9d1ce4e18aa41b76e7820d1c14b78cc91 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in polymer-afahf-radaod (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4c8b20c08110522ce8e5311cc90c8f150eb6456758da66a7240ae0650ad282dd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nutravaa-nutafrd-nddfudadtr (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector addc95532b427c2af72a34f3d71c35b77856d06c172564ac5fd07f8175b2b4a9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nuilva-vmiam-rafosbsua (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 208b053995fd2c10c1394a9055453ec22636fcbb69a257cd8f9fee88929a3e3c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hunim-satu-aniunif (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c57fc360b560ab9263358d44b31cf7f48e63bc409f6a25dd472822547e92dd42 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-172898 Malicious code in anidata-hadis-mabadid (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 648c24bcde46885127634200e0a541e7f831cd2380d3bd6f53ab11cd8a62c19d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kapvino-soni-fuvdavaibopva (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 85c64af8240e2e15d1c3c758573b58efacb4c0cd16aa034013b1ba289bc7b190 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in diva-banibo-imifag (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b54d753f63b8cc1e5677913f2de7c252f2680b0a12404a6c2ad749cf1af01f4b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kupaio-kula-jok (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector df2140051e0f5074c3c46ae4cc2bdf7054401c3f86436df605331b8a66a3bf5c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...