MAL-2025-177721 Malicious code in polymer-afifa-gomagiabafga (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bc3d34de171900c706cad35fa4e068912923d9b327b7290e3bf48bad18ddb02e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kapvino-soni-fuvi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9501c7840043a1ec0b6767a3808894d1d57e52ad81d8c0b923934dc926d166f6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-176081 Malicious code in miftah-miftah8 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0c542bc39ae046359f38b62b5cbfa3ea3f518b33b7d1e360f8bfa76efa039e02 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-176769 Malicious code in nuilva-daerde-oagfalif (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cb17d20b767e5f1c2cb61f1abf5aed5ab6b0f8de9b91c33cddaf99a74e6ce8f7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in munufafai-sui-cagasi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 43bdb7cf3bf0979bff9fb566f41a0e79c2ba9b58a55f89bb4d7f60f64dac2525 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in buis-masi-buyata (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cc4f3f1ae9703e791c623ae8fafec7c1cd5809d9107ac49bd1279ea06f46a065 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in miands-massdage-esnuru (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ae2838695c79e4b4ceb231184c1e44551b99588e6d200fce795d4c74693e104a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in miands-nurdidat-esnuru (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 065047550fd2959093b1477988b7a752c2254eef6b4f20a8191b062e509c3fb6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kaka-poke9 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8dc366a9053b709d44b689f1803e6d6531bcb4a0bbea6b6739b0bc5ef9287bc5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-175251 Malicious code in kapvino-socvni-favi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f8e3598f6191dd2a7d81c2dc922a650b3a8ac7fb99e020bb6dc413ad50ac04d0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hitachi-poke109 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 335a3e9cc21bae090c6a67d7bc29ca0edfe7759ae8b73ac99ce276a4b178de27 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hitachi-poke100 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 819d71ae945b01118406579fb39aa45abc3eaf99be1c183d0073acdd24bf7e16 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in buis-manuiais-botayad (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 72c0328ebe14766ee0836dd9ef3b6afc63bc4a4779813c31be65206a04e5a6a6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in diva-banib-imilbaiv (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f04c8e7ee61e1ed858f862bf2ca2f2b521ad0056a1637687eea1c01d1314fa36 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-178050 Malicious code in polymer-idasifgfa-radaf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6bf59822b9b3974b33fa2dee44d3e503c08fac7385e6c19546e5b02297da5443 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-174776 Malicious code in hokage-39 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d29277841074ad498d57cbb0b4b1a56dd420aed9a44cbb207e58d778e28eec4a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in miftah20-miftah7 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4285142638ceb1be42dae6eda20cf2323146b30b77b9317a4e7ebd4f152e0ba5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in anidata-hd-matsafd (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cd2c5bc902848bd7fee9d9c2d3e31c36e0e012f54eb104f48e3508f06e8330c9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in irfan-poke13 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 319c238258bf65ed35aa1d8e9874d70bd3732b9fc98504d81df08da41d88d22a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-177763 Malicious code in polymer-agiha-agah (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3850bb81a886d4da6951917fa30a4ab107d2851263d3882d6121f27cd6d6fea5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...