MAL-2025-177991 Malicious code in polymer-gibogagia-aga (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4b300b642bb86f01915cf7975a7772f41c3f472814dfa4acc826200fe07c637a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-179046 Malicious code in thambi-busrt-vae (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a062ea656ad77fd0b5cf40bde1e0480cac3ae0d1710d96aeca0853dc81c04f56 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-173953 Malicious code in diva-banubot-imubaugr (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 12918ceedc2091a6be4224285ed889596d0d23c1234f443b130b788e663b0b39 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in augis-po9r-munafpipo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2fb7bec7e7687f1575abafefa8fe497ec9d35bedf65f62df44a102967424133f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-172621 Malicious code in verts-otio-namgpfai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 189b6319104f70a369bf6cceabded462242a6ae6268afd2099881d9318552f69 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-172250 Malicious code in augis-pomdoi9r- (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aeee1e28d203ad4d8b0c2d5c2f1917bbcf6ca8ca168cad389548efa455156867 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-172248 Malicious code in augis-pom9r-nominaly (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c6d1db75805a45a6357679be87741483397b23f093a4149c371c29ce51f6bdbe This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in verts-otigo-nahigfa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 27311ef2532e49c6e25411d9eb3fa42cf5877f12dbc41cd8f13004434b158277 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in meteorseer (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 643b48655213e56ad9709ac579d9b720fd41e6adca804c80579acc5c40d071bb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in josecarvalho (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector eb088a70e71bde5b79233a11c16136dd3bce0bd930d4dc99acd6feed6b4dcff8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in eimearmartin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c7e2eee8a3763610315ed1952ab7cdcc6f4c5696924eb59a3c4dd6a71be46786 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-171352 Malicious code in isabellawilliams (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e2f84f6aa614a764aea0203a3ce8fe12ea1ca66024e4942a9f35711509446ba9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in clodaghkelly (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3c8e9bf3bc5f31ee9ab2ade6aa147bd4d6c86a67cbd855964ca6933283b51646 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-171134 Malicious code in efp9 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9acc119e6145ac9d6bdf981889052ea5a22190c8d3897dc412c996c8212486c0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-171478 Malicious code in latifabdul (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 54ad485e1ff675219b46bfb4875fd8d1d7e05aa1722154515081e6f3b8fa76f2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-171521 Malicious code in lucaswilliams (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 975e8903f35832bef4ee216a958b09c4d38f4d1e58392e2818e0ae266761e8b3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in jimmy-poke21 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9895b7fb3302d754c54cfb6f7d33b3f6153ff9190bd6a6fb49cbf63d74085862 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @miptaa02/olaaa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e49f8a463f8eca05bf116efb6376cc710471d8a0fd2f1ace4dfe5ba0a3300f9e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in teagood-manaki3 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2cc9dddd51ee509d670b0be5731ada9cb780401f3cb8b743d797a705a75a2c2e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in inal-poke100 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 07cd90376d288cca78a05372ef217e2aedc8a17e5d4a7429c8984b419fb0ed9b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...