Malicious code in tray-uozp-perst (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c5c7c6bbcb17eb37719c9e920eedbd2f9c0f2a039fbcd5efb86afebd93f2a059 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in zaskia-poke8 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 185c44b6535ab4fbbcdf65a062cf49981a576f2aa0186122353d3fd4fa6142eb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kupaio-kulaa-jokioimalo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9892681210432c6b1774ba629c23f4dbf124c92b034f5e0c80462a4de0cf5b6b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in alvino-28 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d35c967ad901cc6975d654e86d0568fafda4920417f4c2a4e4f6b835ef04b6a0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in polymer-datddsid-raadar (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 86381974c06cd7d2735d53f42052a95246bf65410d673608d62053f0d8a1acbf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in goodafin-nuig-gibafgitfaf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8059bce59a5dd7634e8db9be2a908df14e242a80229a5636d8405f816bcacc3f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in divata-tunabi-ivna (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5a5a171c0bbbb7c7fee721c44c173269abd8ca467bb55699a28b9a567f63e7a2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nuyar-amair-tabiga (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d4ced4642bea7359c68e46919068ee87c11566bb97886945c0dbcf5a651d05e6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kapvino-socovni-favnvai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c6293705564f1d09db55057f8984feaa9c9d0ef5332cb5af488ad441fe5d1c13 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tanufahuir-sofai-dugot (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fd10d49ab30c25a932f86494b9d3470319662153fe5aeae00afaf724078ca6e2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in poglymer-ogih-gafiga (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c723ca3dea31c23aed971b4a737be0b0e07ca4c7b25508c5199463629a55dda9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kapvino-smu-idabi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d7d74c87947aec28bda00c39d23dd58432513d6c3ccdc1eb9753e590f02bcc1a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in poglymer-ogmimh-vgg (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1e2fb2b7ed28f1a3884fa63dc342221d63aff4600fd6aef0c39d207d5c23366b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in godi-tufam-iuu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dc8e578c68951164d350fd046607240447df7b5fb2c855dc2fc308b66850d027 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kapino-samunvu-mudvdabi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 196c28e464581247e9b16fcf789b727699a76d1c311e8d89f8cc275acc0e2365 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in haruni-poke125 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c0f27800ed5b7ffea490cbeb10342f30cbb5280fae4a0cf223268031ffb2618f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kapvino-socvni-gbfaibssoi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6e94240ceb2fbb17e34744ff1c1e3fe6a0afced2542aaefacb1c6c4efc6d4b5b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tanura-suif-dafugai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 11af725d32bce543122d3c78825de6b489ddb6c129d30c2b2287eabce58b7cf6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ira-48 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d8c961134f93a9fff8dcbe1ddc1320f345b5071ddd5082b035fbe23b6a5ff5fe This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-177933 Malicious code in polymer-did-doraema (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 29dfa6320c9feece58215fd76757d813615768883c6948f883bb22dcba74bbba This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...