MAL-2025-177694 Malicious code in polymer-afia-ga (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 61a1e2632b5303bb5cb2dfd37b6e82d5ef0a6731d9a4d5133d05f3375798f107 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-176290 Malicious code in nitaaus-13-reff (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 70e41983afe1172044eb2ff38e17c1091a9fe96a5b772f1ed5ecaaa68360a9f7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in polymer-arash-milddelio (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 75b7ec85d9fe03ccad52e62ad0ea36b6e4c1487d282557a6c578dc95c9fb5768 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in polymer-gafhai-agka (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6632fc16fc2db809deddd80b58a4c36a08b5775a0e742cbbc0662f784a291084 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in divata-tugabi-ivacvafu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 969b9b80f56330a6feeb6ba66b6bd7a79afb7d04e84e75ea336396a51786a306 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lia-33 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 60b20bbdaef9716dfe265b59f77a1807ca4ace303bd8512a11e13b6e7917c39a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-175729 Malicious code in kupaio-kula-jokosimalo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8f196d73b753348b399f40ecb832d6b584b9247a52f565677df7bb00dee06211 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-174709 Malicious code in hitachi-poke68 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 26f8495eb9817d305c8d872bd45fa89f6a337003b2d24f0b6ae95b1e8f6b36ac This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-174766 Malicious code in hokage-3 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7b15d47ce762e1f19aa3a96ccd8b8fef7983f6d9dbfc597752fd2aea3a5b1ec0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-176969 Malicious code in nuru-suif-dagai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1ce81f1f11a94d3b17b9413a7607a1b2de0091bfe0e99df2276613f3ea555db4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-174484 Malicious code in goodain-nusiua-nui (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bb2d3d90438f5401f9aa731a3653bba8f12e6238f0179370241dcce318d36fa9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in poglymer-ogi-ggaf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1c3dca11ff3001cac00e6a6b28fc14a5b777992e652da4e3e60394352177b5cc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in indah-poke12 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9b79b9643d226897aef4ce09471ccb6bb39070ae8e329284a93aca48f33b4a0d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kapvino-somaggamoi-ugafaha (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 98ea67be42693d2bf3a8d5c663f9f879d4b1c3f20eb3dc6c2632dfdb2445d843 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kapvino-sovni-sgfi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cf668712d0c36a70bf7564ef4e43aad6bbb398b6ab63282698662443a71881ce This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kapvino-sovni-fafsfkfsgfi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9206d8a6a917027c3f48b4be6694e1892412494e4b999d4d9330124083382915 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ksai-kiloa-koaio (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 69421902122801f8ae8619c6717749fc6bf4f4dacd829e9d134d369395c0d663 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kupaio-kulaa-jiakaualai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 06a3c6060148dd971181c7ce95b28100600d81274e68dea682cf6641814b5c03 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sahufarf-satd-fariraf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2ab33dcd6b05b471bbe7c710ca3fb6029735e08f2175747aefeea313371a920c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in butry-posiy-poiy (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fc09c009e8b2ebe9cd036b88f774cd16896ff39c808d8848d9befcbcc2827021 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...