MAL-2025-177501 Malicious code in poglymer-ognbamoah-afagai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d1318069924fe5c85fc91540924e32da2362670a97bf83ed7d116a0706802776 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-178517 Malicious code in sahuar-satidfaf-favufaua (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7de4fe9223ca3c5e7c02c87915688bf70c44bcb7a2e1f1e6fc319d9c86ae9193 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-173334 Malicious code in buta-fadsg-vafsdfgun (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 421666e16c7824ceff3c2c4c0024721c5c02636e7cbfc33c011c77e851f52ee9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-175431 Malicious code in kapvino-sovni-fafkfsgfi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6482aa194c7b534b4dac570f8474b6efa9172b7856a6c01d9c79db90272bd778 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-178171 Malicious code in rindaman-poke11 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 724fb08c2a9e112bb1aa6fa78507fa0dfd3ea5618b72150858b8d7029e828c2a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-179149 Malicious code in thambi-yutrs-yuhgd (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4b275341dab4dcfe430b41170c9a5e3ec45a896a58498e0588ef476f46e876bb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-174264 Malicious code in godiva-tumavai-dninu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bb87e09c4b6db3a93f2065178b51515dd786695d1705d4c644a09868b6a7bf77 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-175413 Malicious code in kapvino-soni-favri (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2c7d083549be6eb45b4c45e510ab1af4dad1a61a587e762dcad23d9b01f58347 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in polymer-rtte-area (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e30d8dda9cbba94e2df83762e3ac4a3acff7129759138322a639c80ee38e5c2a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in haruni-poke120 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c42830369e521d7f0231b3d6fc601af2d8956aee1e99ecea64a3100ff0d479bb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in namacida-minuday-narti (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2fc5553ae50cd0df8b90f4a5530f5c31b3d85a529ea26a53c79cde89ce32fab1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rindaman-poke57 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector eb982df2248236641487c4d5683d6f526c9f3ff7b7a744aeae9afd8c7744cbc5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in divata-tugabuai-iumaivaci (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector abe471b3a2b8a65c48369c3a4fa1977a9f10fd579145ae6de352fbac0d0a47f6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nuilva-avim-rusivinva (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4f4b310db8fd1c05f43d2e19c6a79a914f67eba48f40b91b713dbba0b691ccd1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kapvino-sovni-farvavi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c2e1e38d4dea5c0ed8a2d9e5c8bd6db39bf777fc87a1ea28f568085142046872 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in diva-bani-imbufabaamo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 468348f134d8f2f2fc2dd4b8bf3681fdfcae8b776ed05c8b268630b96dbc1fcc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sugoodaini-ngasa-abainfau (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 23df0ba01dba90cacfa20f112b8b4e4d472b015146c11c0b88a40f9b1dd395ad This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kapo-sadamu-mima (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e78e8fbb0449fd66c1616f5cb72b584592f6c70c2bfaf6abf35353f7c69634f7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hunimi-satihu-angafagifa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d6f78aad0adc2b583b9e2710f1f19675e4ff12304f3d05d7799ad6027098a01a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nuilva-vmiam-bunamaba (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 045d8da55b89a99ee87ce079194dc148384cbf5e96446eeffde3fbc0ad9fd68a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...