MAL-2025-177809 Malicious code in polymer-avgof-aggifiafadfo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 869f876c31a26eb190103f7cd637c562d2b7c824f2ee8dea4363c135e73463ee This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-174053 Malicious code in divata-tuga-ivabio (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 01e70b54d7238ff00d6584f47ea5d9466e811aec87f6ddba46d30b14aec0dccc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-174376 Malicious code in goodafin-nuiyag-gifatuu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector eb82205c9bb56f7812c30fb833c00242c29c0bef508ec4044014ff2cc66e4b41 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-179201 Malicious code in tray-iauozp-pert (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 51f9a7eb510cf8bd0876a7e119f11fe45d085de520664448b5fee4b66544b5e3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in polymer-tyusse-sesrus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7f862d7e875950b9620dfc0f78fefa25b9afd4090f268671643a77b23074e161 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nuilva-darde-oaggfalif (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3beadde67f58e729dd63e09e2f6e22bfbd4f289a8a31705f024c887aa68478a7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kupaio-kia-jakafafsfoai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6f20a6eac0dbcad01c7397af568f281cae2c744e3529015d1a5d9c51dc859d6e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nokire-nakao31 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b1b6afd20e1fad0c68c1daf36f568008a1ec546d125013c8d358cbe314e11da3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in goditu-tufabm-uubat (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4f9694ee19a571ef05321b76237f8caa645053b787780d4b567ea8457eb4f403 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nuilva-dadre-ahkaosoganfa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8fc4fd51131943de3f6c9ab378629e96359427ffb42eb4e404f90e5a362d9bac This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tryui-uturu-acce (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ff52e0f3cad480a824a668d0cedeb21193c6deb23e26804ae8a1da9fbad2e7fb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in polymera-buyaitatar (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ce73e87bef04e0d94ceb10b6909c4d54b6e046f8a818663fb8d740414849e85b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tnura-suif-dagai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ad3774389742534a52facc136fca4b30a013a1884d688362a97888f6baaef66e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tanuria-safafai-daufa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f01067980a66b4082a3da5fcb4722cb214f38cb20d1c736db01cb3ab3b689978 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in buta-faina-aofagaiana (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 825506b9c525e62a25e9dadcde77bfc12ef0ffa503bcbc254c5d9841fad8302a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in goodafin-nuig-giyi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3efed51db6f5cee5df4ecfc594f55584cf2d82f2f48f46054cead52edc1f1f11 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kapvino-socvni-favci (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3bf2df53495718caac97ddd0049d8d6a9eb115aa06d75a63d6f517eb407ad8c7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in munufafai-sufanfufi-cagafifs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 50eb208b81f0d1776aa729cd517550d22f85e6444294050279e0eef0fcdac9a7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kapvino-socovni-fbvpvcavnvai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 103e5045c6b8cdd9a2d6b3059890c96131553aa69c4b274d4de31029782f76b0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sahufarf-satidaf-faivubs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 64a29175406badc58908c2c8552f46d0ac6913a598cbbc2fcfe94b0231bd0a66 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...