MAL-2025-177883 Malicious code in polymer-avonnf-aba (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b21a5fcf9eec3f462466a980e02d24d8d6021ff90d1e3d9066acf7e18871494c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-176574 Malicious code in nuilva-avim-rusivantinva (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 40d03ea53dfcd1ffbcae53d2f5fcc02ea5ee5dd57bc58f7400ded2ef682beace This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-177336 Malicious code in poglymer-ogih-gaghuagoaaga (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 33982ff18c7e2d839043ee5d9dfcc129987de58f250a6a54ae83eb2888c8e083 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-176447 Malicious code in nokire-nakao8 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 99938a4104c7bdbfa317aabe590359fcc288489af2d1b95bf3cd7bd0931d2d8b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-176827 Malicious code in nuilva-darde-ogodaf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f3d814e6ecaff4819d17c0596b38c1f3db2dcc4875b61af1de112bea60d5c74d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-178842 Malicious code in tauhur-sofi-ditofta (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 15e472164b81c942f26e336a9e2f69f9af2ac69951a1d52642839aed40e5d3d5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in goditu-tufabm-dibat (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e980c8dc7a879ef7feb007e1f498fe8d2edc90d11ff69aa62dd13e2163f9773b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tryui-publ-acce (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b80fe54846ef60372c06fb06308a07ef548f1bad7b680201f95bf8a333b3bc73 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kupaio-ulokia-jakafofoai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f00eb70547c548fee38aed00f83212520b58354b7f0726075a1fa1a378699137 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in buis-suninna-mbba (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9b5db5b35d3074bba07ff3ac3be9c52e296894d5ed6882b411edcd9c05956c75 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in unimunaf-safiaiaf-cuaaagu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 454cbb28cf217b11cdf7018b34680bd4277a7b65fc6a991258772fd7677301f4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kupaio-uloka-jakalokakai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5d7f61f11a3ccc7194bf4380088bed633949fae86902fe334b0370a341f20864 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in try-iutu-nudy (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 37320324fccb84f00e726bfacd505581d26b38675588bfa6358b295fd937ce81 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in goodan-ngasa-abainafau (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 36d00b72a48d32fb6463b755bb21d981373799cc45ad49c27136c2db9736a907 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in polymer-avof-ahao (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cd96b39fc6ffbf803a105f58fc4e2816b5ea97b3e39ae5e3ef956a9887f19de1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nuyar-adadar-biuat (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 95f61cd67c96c8c795346eb0b3904319c1b4e7b076fdddc80c0cc6575a0b898a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in goodan-ngasa-naa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d35496cc04d65340108a6035dbcdfc32695b0b8f5dd4572544baf249377f9ae1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kapvino-socvni-favcavnvai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 10ecf8479ba6ebc99fb95fbccb257332c8037ed68c0ea28ee3f41ce76f0264b6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kaka-poke25 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 39fac519d0ebc6aee09e7b729e3e81fce998bea87ee00c8121d7f57afaafcc36 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in butry-yust-yutsa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 28c8fc587098cf54fdea8d3a0ca77cccef4694e13b09a52b706c59f6d073e9fa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...