MAL-2025-177213 Malicious code in poglymer-ogahh-fiafaf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e66f470de8bb580811adf2f1d28bc8eef36ba37707830559ac92cf4797d50873 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-175164 Malicious code in kapvino-soafasi-vaidas (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e6680fcf3b11c9f87e84b8843d5eb6d5754430cc58e133bd48b8f8de5cc61211 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in diva-tuai-inj (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 40416b778b3a2fd88171e779ea85f66c500d9c210126954fd6f9420be63c6c8b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in teagod-rich2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4a80a96f7703902428c8932638a50642d411729d792c8d610ba5def268dc3376 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in zaskia-poke27 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 393719becc79849e7608d719be85dc5191bc42f3ca1b7f5d01a88f88ae2cf60e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in buta-fbobna-gadaaif (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5f3caf63c8edf54b45117abc1292466f42c2f7a48b21e60b4c42ef413512e0f5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in buta-fiuaoofoana-infa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2c0588c23773c9c2ab794ceb916ce2410be2acf7a9b7079d9de961b499328bc6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hitachi-poke13 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8aa32dec6a7c940b32d3738d8f6b29e5aae10d1a7d0d3f780ef5a9b83c103a5b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hokage-39 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d29277841074ad498d57cbb0b4b1a56dd420aed9a44cbb207e58d778e28eec4a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hokage-29 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 16e08b55a163e140e6f94266d934eeaf36cba8a5104eeeb0a0173727b307b8ee This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kiki-poke6 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4d8b3ca1879c379d993458af9fef2bcbfe6968faf7fec8fcd67de7dd534fc34b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sahufarf-satidafa-farirataf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0845bba33f72ba75cbb0e312da5ed28d652d6dfb437f9d2439d83c9da2ef582b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in digo-kaimi-liaokam (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 78acd8a91c1347a4d1d96256faa8bf1177edc04624f55e30366ddb56b028d594 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in divata-tugabi-iuac (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f9f18ca49684f2bf45c94758764edab67e91430dbd65e800c75fe37af1c48c03 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in gas-ndutar-munst (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4282f66e3d7c86b429854fcee401c31f4351c074e524055c4de9593632995bb8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in diva-tutai-ivabau (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d626dfdfc54970194d1ba2d3c1c606e327fae606f9e7b84f962eb9b88778fcaa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kaka-poke1 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c3701e5021809c7d06de3073c77a81b5dfa51b1b6d8b17814c69a0de1fbd527f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mibasah-nuy-msidnsas (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d821af68f1d94947763b3d838f74e6851678a20fd9a3d6b7d31c1a65acd749ec This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-178099 Malicious code in polymer-teh-tred (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4c795fa09574b04ee633afc1163f4e6c14781970265c2904c77db42b374d896b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nurai-sutaf-dana (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 274eebd24a6ac2d3942b8f7931593a6f42f7e984b71278058c2901c9f4bf9a4f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...