Malicious code in polymer-avonadff-abdma (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a93bf11b89357070037017dd8e27b6fe6cb2d82c1f9537464746d0c1f7354e15 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-172040 Malicious code in zidanequiche (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7b056626bc50a9c2705a53689d5f7b5ac4966e53b1696f314262fe59a616feaa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in airbnb-gacrux-concurrently-betelgeuse (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f902fe71cb86fc56849ea755fcc2c4cb1b0f2d2b8b5e2ba0e79f9a3113e4a17c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148170 Malicious code in spica-nextjs-draco-despina (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 104bee7c9443b8b60097c56006cf5a5de3a744041d0782374f5a0436e9132b2e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-138414 Malicious code in zain-kue99-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1755f3a04bf14e1a8d1a6563b00ff4a089e7c6e13ef475272e314cb51e2e8e68 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-128810 Malicious code in nana-dodol64-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5973c84e7f104d001d3dd9d3867743bdf5d02db906a124961d1fc992036bad83 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-118458 Malicious code in zaki-serabi47-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 12919a7bbaec96671c0b9a2f44e1d326c55b887449032e5ee7452a0f86bc9856 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in outstanding_hawk-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 57e4b732d88152b895aad85870149df9be59036a1e1e4b43d5ecc580b35b5236 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in burning_hummingbird_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1046c4772b56be81f8a8a9184e7c486dde1482dedebe5b384ba247a9767f94ab This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in laila-serimuka34-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 342afe3bdd84e95a1cb3aca63081beddb88f38b91dc47c9fb5a6217263b6874d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lisa-rendang15-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8b4616b6a6fb10c6021a891ee9212768d2f839b6b6833c3dab8042302baa8054 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-90610 Malicious code in siska-bubursumsum1-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1bde3322fd3844a8c07fa9f3e3442f4f3dda92bd460c4ddfdcbd18be4c9c10d7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-92551 Malicious code in yanti-miemee73-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fc6417f3e86da7b8083ef7355223c108647ac308de0d90265a7e54ca2e68dd0b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hollow_galliform_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f81fe19a89737cd89faf7c0421996b6c62e8011ea202340e86cc4af1a6459649 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in troubled-maroon-wildcat (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bf7618ed901d86f4f2922ad7260988906b4337b4ec8f2e0da5d17face3f3c7b6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tania-nasicampur59-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 673e8b5a0bc6889c33ccaf40405ff4f71a9c5b54fa3d1077cef6723f2e040eb6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-62499 Malicious code in dewi-rangi87-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c6eb9ae460ed51d460eaf43f5a3f260ea37f3e3be5b180cffef11a39f9f7acf3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in budi-keripik52-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6e5b31d3507b9de52bd5b97506d832f3bf24c86081d2416e17f81a72ff4ad52b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...