MAL-2025-177386 Malicious code in poglymer-ogmih-affg (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d80511ede6f618285808a799221e1559b8bd20968482e0c753732aae76e0876b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-175717 Malicious code in kupaio-kula-jaoi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4eeaaff83149ea4289a6727f1aa2805c3d7d13c4cc6c27f00264f38fd66f6ae4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-173111 Malicious code in btuis-suinana-vimva (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector baa7b0015d8134787863e4102c9771bd58eed502d0b107c96c194e41646df640 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-179356 Malicious code in unimna-satigoifagof-naioagis (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6eacbe662978dff56871032454ea9faa9b6d20bffc080174c5072beee2946c34 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-175888 Malicious code in mahiu-sautg-ina (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 86f4e1d3d2916e12d1fa2fc7866f914c1083e79042d4eabfef2097094b37527e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-177274 Malicious code in poglymer-oghh-fifaffaf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4316829f147af4e672274a83f3c68f41ca4d28dbd259a54366a1c540a9f7c63c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in buta-fasag-fnfdagfa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ad5e7e26c592049cfc23edc5d259659f15341250a02ff34987a4483a101b8c11 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in unimna-safi-acua (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bea09f21cd51de514a9c57b8b794e20a67d65cc3f0a94e27d922965478f77c1b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in miftah-mipta15 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 641d268af1fd3fc3a245ce3b95b7f8453139b211b9e5c3d67525ed9fd0a730d8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in polymer-trusd-reua (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 48825aad87c53d5f57d2d3115b067cd58eee2c82fdf1e2f7f693585bc14c803c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tanabufir-softafai-dugaabuat (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 669b8b2a9fa26295794e7a73236cac479d53e60d94a961ad58e388c22c9904e4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in buis-manais-miopaaf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 189d72ea6b61e87dbdf7e2a2ffcd8d88ec984dc0c7c6b853d6bb4fb17afec4a3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tray-pzp-putrad (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 98d34ddf6c7aff7ccdf6b5c216bf7467244ae9808a418545f1acc6cb2e386797 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nuilva-avmim-rucooivsv (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e52357a9e60f7a5d03fd36696ea87afca679512ea3f20c20f804c3e563184999 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tanura-sui-dafunhgai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 289eeb113b8a73586006b89e652b7eaf95e1c641ec4e00fbd54d0ddd965bef43 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in indah-poke16 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3c98d980dae1ce686400fe62fafaf8eac287ec255e206c7e5c5f6ad0cc846f04 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in poglymer-ogahih-fifc (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3e4f97e7414dc543b76ae3be6bf9c211a5ef79c044c314cd28d0be70c2c36643 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kapvino-socovni-fafgsjffsgfi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bedbcbb5735505c001f0e4c8894d166552efac4b41d2ddc22633202f78d26f6e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in poglymer-ogaih-af (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 55fa050d1e6aaa455e04b4317e997470f2225979d80cbe0db94b32fa7a767801 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-178745 Malicious code in tanabufir-softafai-dubt (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 90155d132a93b4a71ab8f43fc7e1d4b0c6a8f34cacee3331f4b5315ae5c10696 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...