MAL-2025-178075 Malicious code in polymer-io-sgdahsdi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ecbc40711336e7d840192390a12d5b7624731b6409fe433ea79121bcb481211c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-172760 Malicious code in alvino-11 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e485095ad6e8a5c37eca76b5d29d244c583184e5e92734588bc4aff9271f183a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-175082 Malicious code in kapino-samvnavu-bidabi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b91bd0d568c84a442846e01dad108d479428ce9beda87684fe89385803d93628 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in goodain-nusaia-nubafatutai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2e97ea3f4341b818dca83f30d071015e056c2f17080816db311afd7b626c9bac This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in polymer-afaj-raf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3396705552e4b2c34631b1af009fbdb27099d1b594033f5ad1546bc4339248cf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in goditi-tufabmu-itubat (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 19b5b5628a623d2413dc8fc0a824e43f81a9f8b801488ccc83e5e23aa91d493d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in anak-jalanan-mdn11 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 21b9ce2ee3bb73ad4756a121710fdde373d2ff2af2a7dd36ca57a3484ff4881c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in poglymer-ogaih-gmag (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 428bf6f2fc8274bfa824f02176a62b270d9378d9c95cea606fcd8ecb06c3d28d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in teadod-mipta8 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8ecc0a7126c26beac69f3d068ae286a44302110a9cbdfeb0fec28a9f2a3f6089 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kupaio-kia-jakasfoai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 69d9cd01dcc2c58c08058f9c87c20aa60512e346c42728227fe6d646e3cc5dd2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sahu-satug-initaggai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 24fa378ec3a4b74f24d66e5250f08a59afb2038a30479dab86c52da236b7e954 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in polymer-avgof-agfadfo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3602807ec6768fc5610933d2796b59550d82c5b0c36abccafc0297a829700042 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in polymer-datdsid-radar (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8136e3475c2998e4039f0367ee0ddaec65a5189bf37046afa39f6bb357ee3008 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nuyar-adudar-baya (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1e9b83b070b9fb9344aead823b515ff248326ab4395ad8f758503bbcbce73264 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in teagod-nalika1 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e0216b1483fc0aa64419fae4722dc1b44f1ca2ff7ff9469d7becad40d71c1d46 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rubiyem-buyt-butui (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c6bbe7a491ca55d5a7a003b91905bd92e1bc4fa24f7dd1e8cf3210fc8803105d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mahiy-sutabu-gin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8e157c750984d6059f5e0177cc89e863199cca889ff7b88bb6f4c4736d0cd902 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nuilva-darde-oagaffgafalif (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2ec35639250b58fe8cb75e5db2e69ea1447934dd550f9269ddb23b3e5b5bf5d7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in inul-poke15 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 18f880fb7a5e2f34a9bd48f030646950c1e2abc459eb2d0e7193cad85285a443 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in alvino-18 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a79e1e1f22322114d2cec82addf6419f098c0556aac2ddbe67b7ab396daf09ca This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...