MAL-2025-177807 Malicious code in polymer-avgof-adagfgadfo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 07ec53c2fafd41058b464d5ab4e7498b7d48dd4dc4989ddf422608b283cc5ea9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-177031 Malicious code in nuyar-adamair-taqaibbog (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 168b6e3c5caa3685379c145995bd15f8e402253ae55cff21d8831bd01cd5ad2a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hitachi-poke113 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1c585913fcbbd4a54f657f18f07b029918702d1635dbf0da2d11120affe191b6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nuyar-amar-afdf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8a37aab815a51fb280f9f537bfc0d48354cbd977cc57ebc70636c64c35929b9e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rindaman-poke27 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2befb07441d57ca1944d0c580dafc478d96518397427a7fda34ae43de3e7029f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ssssssaya-salwa-tea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector eb51ad4074a411446eccc82190482a072074813585d54bfcfb35dfbf79c1d721 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in alvino-16 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a2c974893b7813820b52b658cb70f65ca5fd4d67b95e6cb57af04e6d3de79439 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in thambi-vsers-vedfsd (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7215d20d739497a19f073539b94a4d3b54a81661aebafc21e32d68d09bcffa68 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kapvino-soadi-vanunds (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5d2fdc1e1621dc6d8f60f651f17eaddcf2b160b029fd785a785ae879945c9d00 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in polymer-datsid-radar (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 94dabe2472312d9fb060bc8109910d184a70584370873b1ec241321c549462e7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rindaman-poke70 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 015e483a78aabe90c57d84e3f3a3d1036165aa803b9db2c00d03b7f63accc209 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nokire-nakao3 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2717eb035b89512bf1a1096556e593af08103d260ed3d2578eb6fe42016a739e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in anidata-hopnud-maviddida (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c976675811399647ea67159e2b2f64a11e96491a005b0cef5966dedf0668ec78 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in koko-poke10 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6fd7e55db96d63387e82517ab06ba7e7e23f648be8b38b058ad1f3fa6698d8b4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-175914 Malicious code in mahiu-stu-gaf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5ccc912bebc5fad2bffbcf6a62818ef3f997824b3fb761452350ca02749bd324 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-176853 Malicious code in nuilva-vmiam-avs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6bdf9202fa04b6d7dd3fb190587bc4670a383a8db4e2f998f78c5e04783836a7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-178954 Malicious code in teagod-rs8 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 38adf0dec0c24baf817abb2f9473987980d118ba096ab3556dcd21db6c1bb11c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-173193 Malicious code in buis-masi-butan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1b560155a786406415f94fedefafd01e00edcdb81ae3c49837732ba46ad724bb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-172708 Malicious code in abtennng-putri-tea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 88f8add7c29b97604fbf69e7e39b9555369d1b29cda1605c7176e03fa5981b95 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-178703 Malicious code in sugoodaini-ngasa-abi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dd6c5fe10164b619a819ad125737fbc9768d7840f6f8c4d822869c7190bb2457 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...