MAL-2025-177899 Malicious code in polymer-buya (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a5c21098ff9fa8981f1b26aab19a78e8c0e6d1ceccec3a7f1bacf7c9c7bf840b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-173200 Malicious code in buis-masi-mab (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 29f77dcaa74ba850f0d062a2aa22b4333a24c8f2864ff966320c5115c222777f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in zaskia-poke1 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b76e8bdbeabf2f011c55067569b3332891a067fd7c6c02dbb885d3972629cd12 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-176547 Malicious code in nuilva-avaim-rasiaivan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3d431c301da3f167ffd507cbaa6245844236542e652fd59d37ff3058dce8e530 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nuilva-dakdre-ahkaosogjdonanfa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 78ad888db5327546cf75bacb21a4fba6b3cead18dbddf6b3f89ba91f462fd25e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kapvino-somdf-fidaabi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0ed2da72f8b31330d00d9b881fb3c062098f016cb019bffff45bb8d2c56d13e5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-177715 Malicious code in polymer-afifa-goma (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d12b54ce7758dfd689253ca037649e9e846d5f8acb6745dd1dc1f6b9f0948aef This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tearich-racing7 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8f6b68daa964845a3f024549385f08fc963eb820a9cc6e14595f8ec873b20f72 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rintono-poke101 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bade7182075b4a7d4cb7a4e3cf2aad5865140a3b9aa909e06fce5ac62032c9cb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nuilva-bava-muabavdzac (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3c1525c96b7562c19afc37b88d9984affa38e204a0ead737910eb41722581499 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in thambi-verxs-vfs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 49aa701036fd69ec6fa57b86f2fba75b3112d614f9b3ca5273b676b49e750452 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in butahu-asfui-duigufu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 62add8d0fec1d2949c18ce3326f7030cc2af826433ca6024e6341b89ec0d517e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nuilva-dare-ogoigadaf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7148b214527ac3a555b4ea2d2ce49d4c1967e4e34022ebec4afa37f3a949a3e2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kapio-samunu-maivcavma (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 033cc4198dd657418a5ba666550f9ba6914a9813de6ff8d2455f137bd3f32266 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-173583 Malicious code in butanah-fipofa-ihfuh (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b7a073bf663c10d1af6271bcbfbd386a78dd931f745daea61e2d0e5f272ca5e0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-174648 Malicious code in hitachi-poke13 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8aa32dec6a7c940b32d3738d8f6b29e5aae10d1a7d0d3f780ef5a9b83c103a5b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in polymer-afajif-rod (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 90b9134eeddb6b51047ddbe915ca2d741e4c5d23ab42eac747c75aa1908c6fe5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-178380 Malicious code in sahnim-satagi-anj (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3022edb8466cb7e07806a1f410d8a2c9a707c0dafed8ea6a6c1a9de2950c14a0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-173126 Malicious code in budi-kontol-ru (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4d7d3e64a2669b2df6dbf358aa245bb22077740519017644ecf1ab341ef3f25f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nuyar-adamr-aduta (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 995625f3b5e314e8b6d0655ee4f9d904ba4111d16fca46d0c9cbe5c768d587d7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...