MAL-2025-174570 Malicious code in haritono-poke32 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8eefa090782e8e033cef36d036bc7dd2cd25f4d0bdb4a60a21e67c9ca135088b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nokire-kushiya2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3fc0c45d61eceff1deda60b695121c60d413429a0bccb88f7469fd3f080f62e0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in alvino-43 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8442ad98a232f3053f831792444b19e1942e14b4edd450526b77ce165cda9218 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in poglymer-oghh-fifaffc (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 87e38ffc250c0a966038ab4015cf4ad1fed6c651ebb6d97b6847911ae3706f88 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in godiatai-tufam-iubata (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ef2e82251fe80302eece89ffa0d87d59b063fc95716339e3faa8b865c1ab5906 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in polymer-afaf-radodd (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7e3269a03a64d897c2630f7cc1c79b8cf3684607026aa9f8e3f8b81eeb99e63b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in budi-memeq-bau (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7b67f6a4710b5a97b5087f97914cfeb558cf275dd15128d2b54dc53e196bb110 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in polymer-id-doraemag (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e65e6b88910aa1f36b5a448eb32bb71ea93f0a4f8935f5f501438612b280e782 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ananda-poke2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c6b439ec9e13dda10890f4cf1f15feb7a2c9c43abf87bd17127d7029c22d800e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in poglymer-ognagah-agsshohai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d20f2e3610becc0b1add0e383d046837b0b88fc2e9240e91ca154db7c87d8fb3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tanufahuir-sofai-dugu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 10ecba93a2996cb1e3759f1b3309dbe7abde64cf45ee1e55ed3b5b2f2f1f241f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kupaio-kila-jakaiai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1a7b0c65bebfc2a1b553ea17ac566816608348468ce0841d32ba3f753fcfcb8e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hitachi-poke35 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 89d4d5a2454cf2389e1110a657e7292932c5639a07fcb0cfe8f25bc531f09c92 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in munuafai-sfnif-cauuis (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c008a35ebd520f7b9dba5a631fc1d9bb9bca6d6819ff5346bae134766048b4b3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sahnim-satfi-anjifangi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 829c9259df154eca58406354ffeb6eb51020737401b047d424842e990af9cba9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ira-36 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f68ec347db3ad36d2a9fc4f609703789f1f28dec4c95fc70250609980c704d7b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in polymera-anakti (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b8d3156ddf26f7ff00529a8502512980c89827f0e2515f311c2030005ca0d0ba This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nuyar-adamir-bria (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 008faaafcdd805769fa06d1270c5ef8ac68e41f2d88cc13bede721e4236a9493 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mibasdah-manasd-msidnsas (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5fd2565d61ba6c0424ef9797c538014861493e39b256d94472ef21dc6b5d734f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-177255 Malicious code in poglymer-ogaih-gmag (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 428bf6f2fc8274bfa824f02176a62b270d9378d9c95cea606fcd8ecb06c3d28d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...