MAL-2025-179267 Malicious code in try-utudru-mudty (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e1690e3a01b6c52c6055e88cbc2bd5ff2cb53a3539585e607861ee94be199fd6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-178390 Malicious code in sahnim-satg-a (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 422a543351a017d6549a83cca005e23a84a2f6b016cab666361f44d89d790d9d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-174785 Malicious code in hokage-47 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ffa19dd374c5940cdaadd57e3c29a4673b922e63f8f8c7811daa683dcc0645dd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-176831 Malicious code in nuilva-darde-ogofgdaf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ab7c721febbac890c568928bca33a3ba82add4ea296107cba05709af10f6faa8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-173043 Malicious code in anita-hauldi-mil (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c1a3b5cb7e5ea407afca5286ed18ddd830e2cd0759573dc8cbb73e665a6a162c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-177899 Malicious code in polymer-buya (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a5c21098ff9fa8981f1b26aab19a78e8c0e6d1ceccec3a7f1bacf7c9c7bf840b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nuilva-dakdre-ahksogdonanfa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6cb31f035009f7cc1a30978126d8cc43ab4e395ac32bcfe32019214d438ad957 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tanr-sa-dafa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ae7ee4d6d01837e6372ed319009de238c0bfe9c98c40ad2a418997c5acf19667 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sahufarf-satidaf-faubs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1dccf3863cd5c31a159e563803f723afd7d57d68d0eac9c0fdf912371523030a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nuilva-bavaim-macoucvoa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1549a464a29c7c021793b71b0a3baae98190aa38e34ce7c7557c55b8b37d4632 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nuyar-mar-afad (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dbb265f7dde2b192e246d6023e4c6c8fec9cec781ecc92eb74957039582f95b6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in polymer-io-sgdahsdi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ecbc40711336e7d840192390a12d5b7624731b6409fe433ea79121bcb481211c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in teadod-mipta9 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1158e3777f5daedd1980d213e0f7cf3f1b9f7f8956a72a72544adb9df3d30d33 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kuku-poke11 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2f793425defad668fca7a63d1abb9b7e84d8ab298047d42d3b19e1ec834fce53 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in polymer-afaj-raf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3396705552e4b2c34631b1af009fbdb27099d1b594033f5ad1546bc4339248cf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in thambi-gunme-ters (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector eff7eba702b0eda3f89a787195c74e402724f7ce37b990e91988eea50ebd5568 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in alvino-61 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7470dca2cc7bc4be8bc7566325d1b87239b9f538360edcaf28bb4d584cd7e442 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in iasahu-sautg-infaru (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c29f46ef6bbb1be6e2f8b85c80e72a09c58fd1fc49227128e175987fde79ee21 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in poglymer-ogminmh-fajga (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7831a6d00345ac88fa728ab39c0029df6187c724f18a981dadd4b46cfaf7cee4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in aabdi-putri-tea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ebfd5bfdf2465e45ce6345ed0d088a07bf0f303df2b92f10ffbc11fb9d8723f2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...