MAL-2025-177266 Malicious code in poglymer-oghh-faf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 45ed6527df21401d710e4922c3f48b3944e90a3a2c8a09bbd13999895328ed00 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-173757 Malicious code in butry-mutuyyu-waegressur (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e7d8fe070cfbf7a4c1062e691a101170ab89cc734042e7191feadff448fbfd72 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-173443 Malicious code in buta-fipoa-inufua (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1ed743862c43ce20f8bd58a7ac5aa110d859e253dd55078e02468395ce468911 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nokire-kushina43 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a560021502acbb75462fdfef79c85c5714b2c8484df8075f2b30b315d554978b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-176413 Malicious code in nokire-nakao22 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 11915dadb7fd2ea8b3cf2db29c7ee2030f8103547522b56c5dcddb5a0a8ee305 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-173492 Malicious code in buta-fs0boiuna-gaaioif (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3d9dde825cd7c597c4bccc84b778d9f97ac8e0b1b9fcab7b7bbb7364af5f024e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in diva-tutai-inava (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fe3623fdadde6e61bd46dd97360f12631ca86b6c1220c3935b7db5cc459976d3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in goditu-tufabm-utubat (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d62886da0c1b6d7aa439f045d6f5d35529b0bb48e5e8019a86146b8755cfdfb9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-178294 Malicious code in riya-15 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f8f8aeb8d6a8c0643c3f19c3b9458fb53189fc9b0f2fb13385e3fb295a606ec6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-175520 Malicious code in kim-jiwon-ba (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1f93edf7705a504bce7ea5062cdb7a4b9286d4ef99024cb3a007c68fb574c421 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in digo-kaimi-aiokoalami (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a4cf36db7e630c8b830537897bbff37109e877169b624503ee3e05afb8678755 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in goodain-nusiauta-nutuyaagi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b5a1dc7a6f6603c5e67e9765d7f13751f59f801c3df6cc8dd6c962ed895a14ac This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mahiyafa-sutiynu-gofi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d6bd4395a191f8b90b430704ecdcbd5360548b34e5786254a70f489141944817 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-174347 Malicious code in goodafin-nuiatua-nutuyagagi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5596fcc0d2e192121b515411e781da3fd196b431d4007655615448e2f6e98878 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-176388 Malicious code in nokire-kushiya18 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a5139ecae5de6d774fe98cab4de9c2bb4be7d0939128a16f481207e1351f4260 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kapvino-socvni-favcavai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 33464a6a6e13835ba408b42b90257f3cc0d1af1b4c11f997ce1fdc9946dd0bbb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-174579 Malicious code in haritono-poke40 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 336a0515e95635582049950f9e033463edc064f5aa5311e84d63a69020d089b1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-177069 Malicious code in nuyar-adamr-aduta (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 995625f3b5e314e8b6d0655ee4f9d904ba4111d16fca46d0c9cbe5c768d587d7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-177203 Malicious code in poglymer-ogaguh-hiagagn (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2a922a5ef7f6434f1be39aed43daa66cc9d0a7b32c1a49dd557de2006a9b16b5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in thambi-uyte-buddtd (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a44c726ac1c977048b9fae05cb36092a9b5c37110d83650e563cbfe0177b8c5e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...