MAL-2025-177858 Malicious code in polymer-avof-ahaggafo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 820e494fdb7650acf06974d3d818e662d84f166e50a41fd106ed2db704a30513 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in apasih-merahdd-g (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 82a68326d0eec426a6b349962027895601267885384da04c538c3b37f214ae68 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-171867 Malicious code in shaqulbilal (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector df2b1a77dd62da95473834cdb1f4658c9c64c16d4fae63242de42bd56ba7edb3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-171723 Malicious code in planetpioneer (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a4b0ef33dc9ef08fae077c95a1b2d8bf7b697b3ebf87ba6408a871ff726d4aa2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-166101 Malicious code in slamet-poke8 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6b7497b7b4731adf26ab8d4297fdf4727fa5e9b73808ea3319fb904d609f9069 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ita-9 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2e4a846201510313bd8ac2d7ded2f5061336430752f69da458fd429307f2aa80 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in manadsi-sfaddia-madida (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d9740a6dddc8b5b084478bffa8cfaa6727e0b760e51f5578138b9379a23b5880 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-161638 Malicious code in nabuf-otomabin-nohkkjgau (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 52af942de3c000aefa62482511c062dc3d331ef5942496de8ca79fbe825449f2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in teagood-lokina16 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 493da84c48f8f7c4b2143cfc9860d052432ad97447553991b4c06d9a2cc33e03 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lookingan-nalako24 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2616104a2d616322af4fc0d59d43cb03cc7122ff540b7d69e41e9e207da6c67f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-168059 Malicious code in teagood-yakuza96 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 49c88b57e0a0db07ab3e9d0e04b03fe38fc6582973f9a0bdcd7fe87927a561a5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mutdaufs-nabutafida-butysd (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8d3892c80dcfdb49b50f1209fb1ba94300b8e678d479cfc6168cd7070056f625 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in goodmanmax9250-shout-current (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e6309af85ac43ce323e7bc64517950d273299ecfb8ec69353c1bf3b9a76b4580 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150847 Malicious code in @miptaa02/mqwasf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 547b37dd2be5baf6f508b06012f1b5995d9fac79aa4b7145703a4e957f8558e0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ucok-poke67 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7f0f9c62ca015d8bc6075952cb5b2372299ca1a1a69659bb5db2f11140dab08a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-166725 Malicious code in teaa-reborn29 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e50f973050782989f9bd2f5672f22dc82484d75e9328f96e370e37c4e3e49705 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in teagood-nakamala71 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 708972f026f574ab3eb49006e63c50a1d1e3cfe326683395cbd6ce0c99601c50 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in avomainah-fras-ofafafau (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c2c95b7b26daee26bff5eff26c855d513c9302629e6430b919879202f2d1fb15 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-161327 Malicious code in nabuf-ogauof-dofufsi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 99368d0e092cadf8156538f9f098cf57f9188bd6cb7411242c8c56c85f3e3533 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-160996 Malicious code in mursai-bdurt-sd (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8b285b395afa0339a4acbefdb72bf1b8b5013ccac5a9d6e1cb84d61973872e9e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...