MAL-2025-176110 Malicious code in miftah15-miftah (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 76ec2df5e676b94c46eb23fb65db6877c1199731f33a76e96d347b576cf157d3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-172682 Malicious code in abbbdi-putri-tea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 73644015542b56e36bf5fa0df66eafebf2097c01f24a88f17d811a64badf7f21 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-177980 Malicious code in polymer-gibga-aga (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 69d0e1160d19efbd2bde1114fa2351a20b9c9d882b4ad439e2e55dc5b772e050 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-177053 Malicious code in nuyar-adamir-idfa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 08a557870d20a3cf88e87e65643968b812ba53f81603578d7b640ed5438c3d52 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ira-5 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 73f33a4db70572b5280710a2e3ae89ffa2cf197e8c81a080d0b4000873a727c0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in diva-banbo-imai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2a0d7c690fd4dce5a571e1edb1a896f62a3167b827954f9bf8d5344fb18acd95 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in polymer-afifa-gomagiabaga (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5b0a257f9df1ff26c778c28c1588e408ba61912e8d15227eddbaac8c6c7cbcf6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in diva-banib-imuamo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f02ad46413c928031c8294d654b0817a708137727fc354006452594fb74edcc5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in goditu-tma-diud (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8082ef4ebb543f7b9e55b387500f173c0e73a393bf59ad84417d2049d3daeb7a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in polymer-afifa-gomagiabafga (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bc3d34de171900c706cad35fa4e068912923d9b327b7290e3bf48bad18ddb02e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kapo-samu-maifamva (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5aa1ddea2946ba77ae6fff301aa1ee705ae2b08079466827c8bdca218c0eb8bc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kaka-poke7 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 62a929c2176564a4d33a26cb112ca9119f23b3f11d4a9ffbbc1de803f0429eaf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in polymer-avfifa-fasabaga (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7f484738e7d1f6d5658fd62d1e98f3692cc5384c5dd394d0861d818edcc1eede This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mahiu-stbu-gaiif (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7956e9e04793d40897a14a92eb727edf00917e0ed7da4e0d9a5ea0e2a0d39f62 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kapvino-socni-fuvva (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1b18d103e1a6865d20fd4e2bccecb05247781f6d10cbfd8193759516cc0db3e2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in poglymer-ogih-aafa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 420e7174f37b82e967d340a002b6f7be2fd68fbaa880c50ae84c86423b1884c7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in polymer-afavof-afasofagdo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ca77cdc76f589878102abdba66591f8b54eb743289086ff795ae7a51186925ce This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nuyar-ida-radati (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector da4d361a7437ca8f683eb680b5c2bf4e7832cb76175ba90c4c973bed70f6adb4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hokage-18 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 64334a9b30f4976ce56da1cb219adaef28f5ec1a4ac1ba2cd374390ca121e919 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in poglymer-oghh-fifaaffaf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 80b355e416f56008c8de715cbe91bc252583b5c3eee00d13804c6b7c3b5c23f6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...