MAL-2025-177920 Malicious code in polymer-datdfsadsid-raadar (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3407d3714f07af923c07d0971fcc52c312c03361493ea435438b1f0a19575155 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-174569 Malicious code in haritono-poke31 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 168d76d76c270c0b0d038079fb0a33b4ecf48b4739ddb5cc92b02ffeb7223b4b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-178728 Malicious code in sumpel-poke9 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4e8e229c716f0629655d4ce9b8351042036cc853d115e94cfbb8b43d76c29496 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-173450 Malicious code in buta-fipofa-ihauh (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c71691b3ca72be52df08d3f097a1836ac9d6a82386da044f3ecbe01d9e31f22e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-178792 Malicious code in tanura-saufai-daufaa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector df5c8d5e0e2e02260dfd54e8bc5e02272d425785f1c7e675e6dc9d73fb23395d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-173840 Malicious code in digo-kaisoim-olosdsdsgggnika (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d675799f61d609705152a43cb587e2cd57f44577cb61d45b57a34f403791794d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-178770 Malicious code in tanufahuir-sofai-dugofata (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3d07ee76a61dc52d1316732c9644c7cd7f4aca4575f62f0b5695dd148b35002b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-174261 Malicious code in godiv-tumva-diabilu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7bdb70926edd32967987e67c855c8ffdf820c17bea167c832e4192806375a777 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-174587 Malicious code in haritono-poke7 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector eb218e8431edf270a16ec3db82db531fa594659a5daadf677e8643e795577932 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-172862 Malicious code in anak-jalanan-mdn7 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1cfdd6ac7fd3296a99d7d27b6a2f0c7fc5b55c05d5c8a96d7cfbe92ebc1ca4d9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in go-tumva-diabilu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 45a259407d5bee0272c1c54dec3bdf3bd9d93efd1c99ac059e22badca298543a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sahufarf-satidaf-fabasifaa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 94d6e26d07096698a916e5f8454d6c05a777bb36f43fbbe3df9398d39b770b0b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in polymer-gfhgai-aga (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8f82b0c042a661f9c2fb7fd7ad22b496b3ad5249702fa16c41e678b6a80a13ca This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in poglymer-oghh-fiffaf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 038f4ce8f564aaaa5b45682bcdcd4277f70b7e87bdb241c8353e58b7562e05d2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hakim-poke17 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e4a6e5d27d6d7c4dee5df04c3054b1fad0608567d1a377c43c9a9833c4e9f96a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kapvino-socovni-famabavpvcavnvai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5ce5beabf2fd622f14f01e01caae8f8c1bec2e34f0c1537b212da5bf4bf99596 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in poglymer-ogmimh-ammfaoja (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c7945570bd45d1049ad694f898c0f348ee960035e113ba2aa8b87bdba0b1ac6a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in divata-tugabui-iumavifa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 01ef6145befd1f8e3146a0a7e757321e2b898b06cd29159122e0ce8e249228f3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nuilva-dadre-ahkaosoganfa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8fc4fd51131943de3f6c9ab378629e96359427ffb42eb4e404f90e5a362d9bac This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sgoodaini-sanuga-nutabaa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5acfc27b966e19fcdedc60238a5b29a113fbcc631931f600d9fc789cfdc5d1a2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...