MAL-2025-177743 Malicious code in polymer-aghhgiha-aahai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 250b112f596a5bb079c19ae7cac9440b822b521992a9305dc16ffadda989c913 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-176421 Malicious code in nokire-nakao3 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2717eb035b89512bf1a1096556e593af08103d260ed3d2578eb6fe42016a739e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-174620 Malicious code in hitachi-poke104 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2d56ea2564e895cc8bb966113b086b57df39d52d897b2457fad5cc3217308453 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-178626 Malicious code in savion-goodmin-max (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c87d0511595b244c6c2f9aa2f1e8a8b0d14ec6cc8df2d6646428d42f2cce45a9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-179082 Malicious code in thambi-resdt-sdsa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8dd5f1c9d3694ba4788db538f942b317903dd8d6fd7956d9a04e3e0961998189 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-174987 Malicious code in ira-46 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5a4eeb13ff0f79d1fcbf4f7b8bf4c58355ef39586be95f134a15fea56c876650 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in riya-33 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4088aa58e37aba819a33b0e86537e9ac673f4851dfdaa740372a403bbc4e15c2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in polymer-buyaa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6b54e2c5335d28ff873ef64194f8795881d4d3e268bb9a6bb97a8c04b22021da This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in polymer-aia-iaf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aa0b7fdd8e55305d855f5228eaa946372e9c9c7f7a90e62712f6bd429378b805 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in butry-muio-tuio (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6dfecaecea0ccefd6bcae85a54cf04053ed572c781c0e033dc2e04f6a314d383 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in zaskia-poke2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 546595a318228c8cdcd08a893f6ff0b827c710891520dfa99cdb1d0f0955f0ac This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in namada-kangasa0-nuvy (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b0e7f59110a32b70b21b687d7aa9108fe29397abc4566e4ea4a494e6ef2bdef7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in manyeraru-nutar-munst (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 746b767a262c446094c126ca7a76e058514edb46b9a16332b36a04de94663dad This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in poglymer-ogaih-gaac (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 86296838bd66a8bc2312e8ecf00a1ab1206484e370efc551d7ca7daca3eea138 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in koko-poke22 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 596df8167e09a8fa7f6c81f63e65b4d1686b8d39479f4b6b638914347d63754f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kapvino-saufdaagfi-ugha (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3ec2589d688b87037fbbeb4c3ebe4ffc2a37a67e6919324ba15c357a17f6a8af This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in irfan-poke2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 76ad71113d08d3ff352b13d10631fe5f4ca4a366a6b7806934a20e48eb1ee194 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in buis-sunia-munaba (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bbbe96d990c0c337fc3a1e6a3eeaaf96cf2f9bc325cc295b5980bf1926c4f359 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in abehh-putri-tea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1e38198c5f96e5a41e554a21a04c5a91012c0018f0eabf5644cdad2b3a30bf45 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in anidata-hadits-refifa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 73acfb0801348c8900e83f19cc98ffbe6e96d50482b4cf5ac981696c735bb62f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...