MAL-2025-179118 Malicious code in thambi-vsbers-utyhg (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 304a1b81a1f37150471c27f6b07df5a84501da56845ed295fc904d533e4c27be This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-176402 Malicious code in nokire-nakao12 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4f66046eff30478af907beedad0ce85afc9aa4a0feb377e8a0de69c9badcd374 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-174252 Malicious code in goditu-tumva-diadblu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cf70ed6aae31a40a5311527e17e8b2a2b3029bd724cc903dff428c2e12f44a05 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-174776 Malicious code in hokage-39 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d29277841074ad498d57cbb0b4b1a56dd420aed9a44cbb207e58d778e28eec4a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in polymer-adag-sgdasdi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5289e5e29791b66a25aa4572780015a9eb8fd6adafa8558bc3e24a453991dd05 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in polymer-dadfadsid-doraema (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 09066d3de84f75bad6fd93197808b1fc5b32fdc1d6d7e674d458243005d5004c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in unimna-satigigof-naioagis (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9f88e58b45d0705dd79a88727676ed55b6ed4bc65205da3bac8673b48d5b959c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in teadod-mipta11 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dcffcbfa5948ceb925ec4caafe1dff701ac4f70dcf27bae1b3b7395b4d41efe4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in godi-tufam-iunu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2f25e7b2d1102044b8522042d555395dffd16eee73d0e1f1e4afe21adb34b335 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nuragi-sutu-gaaog (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c3458ac9421392a568a4fb33c9151f595bf0352c24f70e36e53dd1b098eceddc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-177725 Malicious code in polymer-aga-aahai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector da079d46ffc61efe195975d5eac2ada306d89065a51eac30825ec8c811bca304 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-177870 Malicious code in polymer-avonf-afof (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 07ca73687406494f319aea337d2edadfe02e58d996322c6f9fff66e3724a9563 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-173783 Malicious code in butry-yust-busy (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 60f497e8d16be4093586226a88bb543805643d08bd24300333b6ceec35db5f9c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-177968 Malicious code in polymer-gibaaga-aga (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 09b5545f94cb1ecc849cecec316d76b27ffdc03bb4422fd86ca30e27ee7f3eb6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-178314 Malicious code in riya-33 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4088aa58e37aba819a33b0e86537e9ac673f4851dfdaa740372a403bbc4e15c2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kapino-samunu-mudavdabi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 577810d541c0978b9da886f3a13b69854110286665c7efb104c872a410426fe4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kapvino-socni-fuvibpva (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f7e9fca1d265c95d1b2ff849c2366ccc41ed2e8ed54c20a7c63ee1083e6ab84a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kaka-poke10 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 40d0e260223f563342c5e666ce491667066c163fabda839a08e5454e9c104cfb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in divata-tug-iviobga (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 24f51239aecb8a81b4a5e5a83aae21145d6f31beab3a49921df3b85010fdb8eb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-178800 Malicious code in tanura-sui-dafuni (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cf53cf6d4f9aeb63b3cc7271fe219b212aaa603bb38c8326cfa19bda900e12a6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...