MAL-2025-177662 Malicious code in polymer-afajif-roiad (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4ce6e6c800add7a8a86b4183a48902af3e6c6b02de21e21509a2ceecefec42f0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in zaskia-poke11 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cb53018f5b83aa9eea076806eeb018c5a633512282f676dd5b37ea1c0e6c273b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in poglymer-ogmih-afafiagg (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b915818ea1b5b713141371dccdc0e138528c9742d96a32bb16c19d8295c5e319 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kapvino-socni-fuvibva (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 48c836c6d3d0f24dd7a7737b4e21dec27e06037f9c7e99c38a7f84fabb0714f1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rintono-poke82 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1c754ab8d531857b665b1a30df29ed1fbcdbfc46ad500d8a646f32b9efee56e8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in riya-11 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1bb9bfc738595c85944252cbdd11df05915c716c0cf508ae50fe67f527d98a43 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kapvino-soni-farsaamvi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0177b8e17b9682bd238bab027db6bccd2c79b2bfb6fa287cc955c3de72a990a0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tauahur-sofi-dosih (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 69490a27ab68a03e52d1a1675486c72790240b0c3c3501244e25581ccff920ef This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in poglymer-ogmih-afafiag (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d1c1ed14e552717ab8f6957d6eae6f2243a0ce24b9339764392afa06d7a93e8a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in aapa-salwa-tea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9815f3ca5bedabbd5de24e373ac986b5e70af52d9c4811500c48282ff2a425d1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in butry-putyu-mutr (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 937a6028e14ac1922ec07d83ae89032cf91b68a879678db5e694823c08c6bad1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in poglymer-ogmimh-amamoffaoja (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bbbf8a9fc352cec2a178a8f1d9295590f0daaa56e12171342f80b0fd4e57cd6c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in poglymer-ogahh-fifagaffaf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 169370b2f69eb642874ba44413e65f545d5c9cd16cef4ac6fe05f9151c0506ec This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sahunim-satudfui-fadbafa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 094c3e177a68a39ef12260ff947924cea85995bbfde6f28945c617276e0b2731 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kapvino-sovni-fafsfskfsgfi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e0c6bc63015eab172687e70ba27fbfee85050cdd7e98cc2a613e96d8f6d48a4c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nokire-nakao43 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 70cf78672fde4b2380d32485523fae268a0994cde92f1604b1fb4c3cb7310f99 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in btuis-suinana-vimva (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector baa7b0015d8134787863e4102c9771bd58eed502d0b107c96c194e41646df640 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in buis-sunia-nudnif (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 96f1207fb8dc52d423cd07d838794563caa45e69c1eef4ca3e68f35e66fd938e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in diva-tugai-ima (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bb7db1fee5d853ec169dcc9de797e485ea453049aba38336796225933db5392d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nokire-kushina50 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9c839310308c94dd9aec8241a25e1a05a711d12095f468b2445d0ca19beff9e9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...