MAL-2025-184842 Malicious code in poliaoz-alai-ava0ubu0ku (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 23e8c24e6157166762c93e9abf8d00423a21f73d462b1c4ff370e3091784b4da This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-183326 Malicious code in libc-ug-aguagidug (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e559eb97c28fe0a50eced0bd7920844a7e79e055459340ef72ca941eaebdd4f2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in polymer-dsa-late (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aa228a18b74b33a3e9d79d06aa2f3aa6754f85a045bc64537f067d2ba0724255 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-155830 Malicious code in huda-poke6 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f8599e5e2dec73e26203d472053f60d1dc061a9093b7772b59196b5151aedd64 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-169119 Malicious code in tobrut-hen-nubliesp (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 51b0f2b18ed885bd56eb53496c01ded3cfaeb84fcbf51c1141905641ef554872 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in uaragifa-mudifafa-sayugauf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6c586162e63b3b4ba5601fc9eb7622645bfd0f5ec3150866f3158269d26a0ea5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in jeep-poke2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c36f97c09365306db2571e6c4cddf15af60b4a41cb4a6f378d9d696a19776461 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-163674 Malicious code in nudalea-fofiri-ago (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 40cf56861f1c92397ac22fd648d693f2cb3db2b577b6a5bf3550c7f0200c52ef This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nabuf-otoimn-igofogai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3588f48e7cd8e66bbd45cfa2ec0e545ead0b1b0dbd13af060432c5f9309cdc92 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-164885 Malicious code in rita-16 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f7c5be0d08d094c9c6ff4a544c74bdef4b9fe792fa0b541d0508612b5694c456 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in magellan-vortex-update-ganymede (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2f82c6172c917e1fe89c1b3de08f1f7b8fb7a88d57cd33429fa4cb05c4baf99f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147206 Malicious code in relay-nodejs-gulp-proxima (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector be9ce85998f19be660fd01a665097cfc83355d9d6c8b14b3f39487793e5dfb48 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148885 Malicious code in uglify-js-upgrade-scorpius-cors (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b5a619ce4025267f0cd25ec403515e25fd7c994673f76fb3a0cbac6469abc6d4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in jaja-ragi13-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 985768fa7fc809379f2779e6e8b8318b1c3e58c36c41934a194e084d1793776c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-137825 Malicious code in vina-kue68-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2167b366b7ac38653dfa8e357c4c8407e854f1d8a8218ec561049a27a2bcae99 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-131918 Malicious code in ade-ragi97-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ed4216377a8762687045116edd114588d903ea716caa01c5a82bdc9710370d1e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-124828 Malicious code in ade-sambel88-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a86b74dff3b251db9032f714f4c5abc8facf993b4f4216385532630a219a8656 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-127018 Malicious code in hadi-sambel30-wekto (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1e1317dac5ef6f06f5b5c15a2b29078da8c19a72279e79efbaac9085a8450b7e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cici-wajit51-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 34240c977516e63c4376df084571ffee88b34add26a7640055b013b8d2ab6f9a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-124263 Malicious code in wawan-telur39-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c236cfcc814f134b4114e19b923dcd757d19c02dd2092544524ee2c291a3c0bf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...