MAL-2025-177662 Malicious code in polymer-afajif-roiad (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4ce6e6c800add7a8a86b4183a48902af3e6c6b02de21e21509a2ceecefec42f0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in miandss-nutayurifa-esnuru (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ca6977de268761bf6fa84db71abfd53c09c0ca1ead66f6ea2bd920118add0c6f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kuku-poke12 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1602996782dbf58cc9fada840cebb7749160f3ad1dae0ae36ab38beb5c6481eb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rus-setya-rusmaya (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 27e871caaad47eb0e25c1d8481d75e0e9ea8af22450cbfae126eadc36c1dad41 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in polymer-avonadfifa-abdma (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 519a420027c89d5133c89f675c2629c7ff7cf876d92c7c022dc0077aa4c6a2cc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in polymer-aia-igaf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8c3939eae8bb22644d710abcc4f2bb04989fe6a2a32c6a6d2e45a62a7df3d3e1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in teagod-rich18 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9e782a1a27764ffbdcb682fe3c7f6ec286f6083eacd5609220b50a5823b99623 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-173426 Malicious code in buta-fipaapnoa-inaufa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fe380e865249c5e39463be9538941da7ae4a470b1fc527daddac2719b84ae407 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-176724 Malicious code in nuilva-buyavadi-manha (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 826e66a55151dfab95378e78f10a0c8b455b847be94b641313dee190bfe9039d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-176367 Malicious code in nokire-kushina44 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fe575a55eb3a9d08f1f08dc6ad2091a67dcfe792d62afb3331645acfbdaca599 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in anidata-haulid-mubda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5f524bb839370e23a3f8b2e9117eb82d59923ecb6fab32890f4393c94b2506bf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nuyar-da-radatdado (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4d91881b969f003843d2a6a3f931314b72c567bb86eda773b024575199302fe4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kapvino-sof-vaids (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 993cd77bda3fed27d22b840d37fc7fe4d0a36a6dc8d99b3bee23673e850ae6fb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in teaha-erdsa-niuyda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a4d558f72c70f60ce3ee53859852863335a7079041740000fb18763e7655414b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in abdii-putri-tea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3c632eb16a49e0936696f509f31bc1b8ce5ddbb6e39a625c5c2eba0005becf8b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kupaio-ukutia-jok (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 255b6eb7ab840e1d35615bf275d83e08f0f2e8a98c574f84ab22eaaa28555523 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in goditu-tufabamia-dibtud (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 033b1d3e4d1c17b1db0a9e53d08c59b4c69b6a95e93da6b67f6f27be2fe1e491 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sgoodaini-sanuga-nubagaia (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dad89e3854a597540bfa1e1759777d1a15134dac529b8c7e3c13c66510bb1135 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hunimi-satu-angifafiug (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8e43d7ee49599817a92afede2c21da2e44a3ef9e6b09ab08b58ad5e9335d96b3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in keke-poke17 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector da583ff4b5215c35e9e96d459eed77970a2a64240e6d003cc327af4bf46ff154 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...