MAL-2025-177408 Malicious code in poglymer-ogmimh-amamoffaoja (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bbbf8a9fc352cec2a178a8f1d9295590f0daaa56e12171342f80b0fd4e57cd6c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-173512 Malicious code in butah-asfui-daauf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8336b4e48823a27153e9ca371749d188992896ce8e28cf0d446a706252559688 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-176342 Malicious code in nokire-kushina21 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3ea745f78762aab500be1e7ce22a49f88ba50db901808529f2d41efb27ad30bd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-176192 Malicious code in mufabafgi-sufafi-caaufai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector eab617454e40cb9dd489ce6195e3331d70cc40b3b149805fc5d05a17bdcbf3ea This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in zaskia-poke11 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cb53018f5b83aa9eea076806eeb018c5a633512282f676dd5b37ea1c0e6c273b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in poglymer-ogngh-amiagigan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a859c94e443b16964ec837a1d067974b6ef20086de499a2e739e3a34564020e9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in polymer-afaj-raf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3396705552e4b2c34631b1af009fbdb27099d1b594033f5ad1546bc4339248cf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in divata-tugabi-ivacvafu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 969b9b80f56330a6feeb6ba66b6bd7a79afb7d04e84e75ea336396a51786a306 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in alvino-61 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7470dca2cc7bc4be8bc7566325d1b87239b9f538360edcaf28bb4d584cd7e442 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in buis-sunia-nudnif (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 96f1207fb8dc52d423cd07d838794563caa45e69c1eef4ca3e68f35e66fd938e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in poglymer-ogaih-gmag (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 428bf6f2fc8274bfa824f02176a62b270d9378d9c95cea606fcd8ecb06c3d28d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in thambi-yug-berts (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f3d611ed6e620e0d6ec5df092d31171a1ebd1f7cae506b24bcfacf87cdadfcf1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in btuis-suinana-acabs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 61db39546d507c6a372246541382a1f870ad0860f4fe439a4822a65f46443934 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in namacida-minuday-kas (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector af97f2085ef4f3bd1c37ec2e11539e6fa1f3b59ad59d4d2a718c3538795a2db3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in alvino-18 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a79e1e1f22322114d2cec82addf6419f098c0556aac2ddbe67b7ab396daf09ca This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in anak-jalanan-mdn11 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 21b9ce2ee3bb73ad4756a121710fdde373d2ff2af2a7dd36ca57a3484ff4881c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in miftah-mipta19 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6aa829b15361d27005d8f825da10ea6247e0af55c019676b004daf64ec9e04aa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kapo-samnu-miva (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ec334fc7a0edf36d27704d209d571d063173c2200870ea941b76c3626905199f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hitachi-poke69 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3480a4b09c4738ad573f8a875f94fd6bb2ed0976b367a3d2427decdbf03fe053 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in buta-fifoana-inafa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bf4af475ce325329523c28aa6e17a53f66127e2a2286fa0fa2526d360baf787f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...