MAL-2025-177278 Malicious code in poglymer-oghh-fiffaf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 038f4ce8f564aaaa5b45682bcdcd4277f70b7e87bdb241c8353e58b7562e05d2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-178858 Malicious code in teadod-mipta10 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 479bb403280c99a3696745351f9a8629051c6f4559c3a1a12d0dc11b0b3bbb15 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-173660 Malicious code in butanaih-asfi-daurufufau (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 66f6279e6513f93397be98db0ca4ae509300a09553b1c962755d0bce57ab711a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-178781 Malicious code in tanufahuir-sofai-dugufat (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 685a83ca8118d2d11d566ccf24914c9f2a48bf4102c97c3344fdbcc7a1d4af2a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-174673 Malicious code in hitachi-poke35 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 89d4d5a2454cf2389e1110a657e7292932c5639a07fcb0cfe8f25bc531f09c92 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-176120 Malicious code in miftah20-miftah4 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 45e7d5478bdec906bbed9777aa196368650614af2a4731424f3d6df2af78e433 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in butanaih-fafisa-da (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 400414cf41562c8cb9fc308e303ab1823be7acbf0921942f62d4b40cdd812bc0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nuyar-amar-tabafdf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 92b02712572f68bcde48db2a82d423d1d07efde051c0923ee65b48fc33f6cce7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in alvino-35 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8ad7257bfba43bfb9315cd61be12109aa5f35e8a425d6f5c7ffe5c7d987d2e31 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in buta-fna-nafiffa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d831dbcb72dedc4017fee9a9fc6933f0ee54c649a0f98cbfc817299471389b89 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in thudsdmbi-miut-uytd (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5042b5f747df7d082250dd600ae0441ed5edf2a44c2a9f6c9c44fbb57ce16b13 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in thumbi-vs-yunita (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 57ddcfb23a5d1d7b536eef4c3fd361e7cd48618ae5bac94c038e43e9dcc5250f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sahufar-satiaf-favur (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9dea51db246cb100a76ce5e59eb5c830ffcdd280b93634273edf10ad5887e0a5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in poglymer-ognagh-amifn (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d3285d81712b7eac184581659465b362fb5489395b8e123a02fa571bb512efb4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in polymer-aia-af (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 51bbccddc65b921a74d92c8a0a2c29276a16d503bdcee7be2eb170a41654637d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in digo-kaisom-okam (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 29a2cde3a2251cddb6963e1e2973edf14e865967ab9a160a639169fd1420c9f5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nokire-nakao31 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b1b6afd20e1fad0c68c1daf36f568008a1ec546d125013c8d358cbe314e11da3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in diva-banbfo-imungbgsai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4e3916dcaada7df1a51751e65fdafb32c9499c26813ba1539fa866e5f16ccb1d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in manadsi-sadamuda-mimanada (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3951bdf1274886dbbc5ddb919df1ad71bd50a6e5e1d06930fa02ce30f084f24a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in anita-manahudat-ma (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e9247132a49933be75a619ea0113ca6792b69e149e81df449d848fc086295078 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...