MAL-2025-177278 Malicious code in poglymer-oghh-fiffaf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 038f4ce8f564aaaa5b45682bcdcd4277f70b7e87bdb241c8353e58b7562e05d2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in miftah20-miftah4 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 45e7d5478bdec906bbed9777aa196368650614af2a4731424f3d6df2af78e433 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-173559 Malicious code in butanah-fipadfha-hafuh (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector da59add0974ffdaef80ad009c1afc1914642de87c4fbb89d27c75a015b1ccadb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in buta-fadg-vafgun (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9263b0d1afac10e6bc832d01e5647b6c324cd9113036497fb67edceb089f9e58 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-177244 Malicious code in poglymer-ogaih-gac (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4133c9df6e14d6c9dab9979f03b9fa0f8408b9813572cb44ccff84a2698602d2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-175361 Malicious code in kapvino-soi-favaai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5c10b0bc2df380004d29c74fa69f705b83da13a132ce6c7fea6adc3d92320f08 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in polymer-ids-raf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cecc24344f80327cd8a99203e40ddbbcbabd9cb3942acd33e56542fb9ddbd3a6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kapvino-socni-fuvaha (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1f9c1e16491137c8903c0f1a4596fc31a8db2168ec7f98ecd0f644425d029241 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in poglymer-ogminmh-bafai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d51c6d5aabb2a093edd8544a7a8c4c77738e7afa09e89f4f5210beb88c90804c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kapino-samunu-mudvdabi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 69c1a642a4b8677bf55a1b76cfa40b34fbe6dbb6603ac976e27fd30629037d17 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tray-pzp-paoim (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 42672f19bea72846b66eb91d5aa7e8ae3bbe97d289d445a08c8a80c29e39b6e4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-172644 Malicious code in aaaaake-lia-tea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6ae3818f1708d8ab9753aa34702ae3889ff6b7f3389820aa96f9c8d19b147948 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-177937 Malicious code in polymer-erue-reua (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 706346c32d65707d39ea2410c3276da8c48a517034a2286f4eae8193faa079d7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nutraa-nutard-nduatr (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2959f7db20b6fef118eefb031a8a07a1696922b20b66646d138d3dcd68046750 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in aneeeeeh-putri-tea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ef8a3fb8fe85907c7076f2baa1a1486c213103504369fd1949a43872cd06456b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in poglymer-ognagh-amifagan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1b71bd7e36522ecc6896224eda96ee8f2f0228f1195c4ad82cf3c7c368ecd273 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in savion-goodmn-max (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 797fcc13318e5b4aa370b9f23fcb53f13e4db299ad64e630f99f82d4e074ae67 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-176150 Malicious code in miusafasdagan-nasduat-bis (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dd775a10e3c153091ef078521b8c311b0d427f847cc3e3759bb496b8a8b5d2fd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in saaya-salwa-tea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ac772387e300748f1196ca47cacbe1f971cfdac4c6c960fe048a6e9d01be3e8d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-174334 Malicious code in goodafin-nui-gibafayfi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ab1fe690259e363c19602c4735a54c7d9f2299fa9e872ad4e9bd8a2991901cdb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...