MAL-2025-164490 Malicious code in polymeria-butfyias (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0f52abb0755d1cc65fac007e968bca74870734a365e26f7c28918f93dce20a4f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-169473 Malicious code in uarag-mafsituhai-suf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6d5b94707f7d17ff744d6579c66bb3f5a7a5910b54ed0e21828c69323ae580a2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150994 Malicious code in @miptaa02/uufp (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bd134fb91f8ae30e9a2798f056fc39c7b6572284c115bf5b71faad8498fba2ed This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-151527 Malicious code in abu-poke2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aead1621fc8e3ccffab57042fd99aed2032bf426d7f8d904494b733d5c33de73 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149949 Malicious code in @mipta1/aseswar (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2268af5020b4b99328e12b961cec6e81a22cbec9659b0e9057a2986d96286f25 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-165931 Malicious code in siregar-poke15 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 392a666dd54efa39f6b9785e729ba8f9eec24f08c5b91ed647c259a184e7f9ee This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-158915 Malicious code in lookingan-namalaka98 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6759c9b0fe0f37d3e11f2585077e760426097fa440e17708d3a3e44bfcbc3868 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-162568 Malicious code in nokire-genji76 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f181173e01defa63f360be09173bb422dcc3fdc6fde38c27f925f5d36271bacf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dian-poke56 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d7da3f7d4aa8470e56015d42d56f14c7dcf1d28532ba2866a30464beeb40d85b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in air-poke50 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a91c16cd439b4359c36e0a4ad6e526260fa463e518c7d94ab12f165b345aee5f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tealove-nokire40 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 28b6bd0b8b6182cdb360e31559495851bebb399a1ef5a59540cd61fb14ab04b7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lookingan-namakiki54 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 023b7c002cee8e0d0c2741822bd9a475aa911cc395c63fee67cfc6cbd332f2af This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nokire-zabuza47 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2ade38bedc409415d387725ec93cb5573480d6b1a9f1270f3d469d01d8e0fadb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in syahmuda-poke4 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 05666dc509f0d9a0355bb0cea95db2d238896230acd3b7dcd7d96228c837983e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in uaragifa-afiat-usutauafar (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 485afbdb8cafd83e03cc23fc06a67b5774f225724d5862854b6f45af8da292ed This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-159431 Malicious code in manadsi-sfadia-mada (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a15b88e2b505f3307e00a5a8f6d4a0c0de029b9ffa1dc322e39df6fef38fa910 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-162799 Malicious code in nokire-lokcek44 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9a875032c4c53920705b7ba9655629341168e71ef1801f6fc031e592f391ec26 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-169559 Malicious code in uaragifa-maraneu-safari (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 44e76c8107074223e92b3e8822f77c3441d550cf328223adbf1b45d25d27f548 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-154929 Malicious code in fadila-poke53 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6271cbd7b3f0cf5a15ebf2765e398031d8a32e10b8f622725b3a31d887f2134e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-158220 Malicious code in lintang-tea59 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b40cf462e23df142d4f8877909e5cb504db2630ba22221f0ad6c70268546ac14 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...