MAL-2025-177966 Malicious code in polymer-gib-agagaada (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4d043759fbd2e801c6ab9410c5b899948f80b49ba92a5bc3c9b49d511198c28f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-172968 Malicious code in anidata-hopanud-mafdidsa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4bee12ac96b26d4d751895f0088d8eefcaddcf5c3f6344e9934822366b2770b4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-179330 Malicious code in unimna-saof-naioagis (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8493ba1ec4fc0872b389012e97cc81a3f2eaac69334e2e8fd4fe4f10bd1acb90 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in godiu-tumva-diabilu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 743299bb9d56a843d62bec6a0d422267495ee78b798d3e080816ec25745942df This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in goodain-nusaia-nubi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6f7fd60d39983181d36b020009e4aba910366b376988755cd8356d8c455b5523 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kiki-poke25 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e8a62a35653fccac8187cd1a0c720207f27034b2fc33495067ecbae23e778823 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in poglymer-ogminmh-amamofoja (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0cd9cd810fb815d7f416569d07a834901eb5286c4613e3ef975140af048db713 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kupaio-ukutila-jok (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b81fd739cb8751964bc9bf647d048e4481c52ea3ebbdc76a9955c1b4a20261e1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-179070 Malicious code in thambi-rafa-refsdf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 50c1945309a823d4745e9fee2bc3e0bab7ef5a9e5e66614d38375b7387833222 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in polymer-asia-gifgaf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3e8f65f2887a0afa780176bf72f7e42f1dbbd50f034464c4140a5baaaffaf52c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ananda-poke3 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1db6d4c53b7eeec2b4d5ca8286943649f36cb4dcf0d324e9f23edc35fdbcbc91 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in godi-tua-in (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 08f7c865f8800ed723052e1a26059ea085ae24a586cc007b28b51dfab75a0418 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nokire-tanjiro44 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d28bda5420387c47431a5d1c01566f7f1cf7d5df0d0d572ae17d8bb9636bb048 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in goodaan-ngafsa-nfi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b0117c413757b9ced51d9aa7d8c61f7c982c2143e6bfbb32a6f78294af4cfb54 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in poglymer-ognagh-amin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 09176cb5e314a748407172eebee9ff2ce97cf36ee4212a529073fd3ab22268b1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nokire-kaguya14 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 892e4848552c41be5bc300d2ad7dc71eeef00e805bb57988d09bdb93cf2f6b12 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in anaaaaaaa-salwa-tea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a1c0a97e81554d4e9ff9d8cd38d90b09b40f8f2da2e9dd91c43097ab1851901d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in poglymer-ogih-afiamafdaf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c1532f2bbd01f3d621417a818e3a6ba8b0d84eb3d1c079e751138dd4050c5970 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nuilva-vmiam-as (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6d0d499c027cc9cd1af799247a6980bcb608b3d0f24e7598dda2646314453d6c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sumpel-poke23 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b46506bb402537bcc021b663aa507a7a8c7a1ba2ef8877cecb4cf3aae70158c9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...