MAL-2025-177842 Malicious code in polymer-avoafifa-fagssihagbaga (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b286227af420be5d15c60cabeb0f820bde10f33a450922fd049ead3c5e77f814 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in butry-posiy-poiy (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fc09c009e8b2ebe9cd036b88f774cd16896ff39c808d8848d9befcbcc2827021 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-174439 Malicious code in goodai-sunau-nug (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 244dae3c7e1297bda388f3d99c72c074eb178a207dca7f2900fb2575e737cb3b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in polymer-datdfsadsid-ragadaadr (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2edd3a2ac12a3889f77cfcdbe702a780a7cabacc33d831d8b7a315fbc9e117f5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-174729 Malicious code in hitachi-poke86 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bd2a451da6cdd3c2a38f053a6eb9f18b482508816bc802e41c8f9c4f785952d2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-178113 Malicious code in polymer-tresd-dftrue (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b96126b9a5ab79d8a4e430361db84811f51119e5fbf7ae9611eaa94f48c83426 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-178176 Malicious code in rindaman-poke16 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0607d5aac57a98c8f68aa2eee1abc12855b5736a173ef1da55a26c5a40666973 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-175642 Malicious code in ksai-kiloa-kokaialiaio (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector db3c06a171e3f01cf84efcb307a106912a687b6c4ea9150b8196366fe4e36150 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-179129 Malicious code in thambi-vsers-utyhg (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 131e0531537ba109426da14f9b59e9cabb0ebff86246d8fce0f75a3027046c9c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-175313 Malicious code in kapvino-sofgdani-gagfu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b9665306167a0a1a85dee1419f28e38164f99e00e23417acab9153a6fc033580 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-174737 Malicious code in hitachi-poke93 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f634870d1a4cce67096ed92b52e12f109b82e4375d496b3a7fee058d86a8bea1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-175274 Malicious code in kapvino-socvnvi-bodaasvobsadfgu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8d12507dc6fd2672d7e52853c25f33fedeb5f725f07a5533370e136ff2c0a5dd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-174194 Malicious code in godi-tufufaja-inubufaaa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 445ecf8e4a785f865d22d52969b0b363df2beb43cdbd041f282b192dde9e4c1e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in thambi-fret-sdsa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6a8ea88f45243b6edf9dbf04d9c7e95b01cfbd0d16bf3f1ada138550d2228cca This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in divata-tugai-imifua (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4ca887ca7077a210176a260bf5e04e7eef9fff487b32365fc51973e82ddca473 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ira-9 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8ce4476557aa810fd52bb4583a8c02e3cc39e7cb3c8870733c9581432471399e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in thambi-vres-butsd (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8dcf711c03c5da9012b06a944af39e4b54e5a7824f3aecc10584ecb9a1afff2d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in goodafin-nui-ngi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 61d4d5f2eca65923d6665ec28cfe64ffbb17fa52b9a0638b7db8507e60bffc61 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kapvino-sofgdani-gagofafu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector df438247bf6dbd654fcbaadb3b0c18f11b3a4028d8f57971bc51ffa89d35ac9c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kapvino-soni-favavrai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cf5ecd7cf5c77763ef36539084d0a9662a0a8e7cdf135909cfbe2a47690f6860 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...