MAL-2025-178525 Malicious code in sahufar-satiaf-favurafa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bcb8cdfdac7c65abeb056d6464add9c416d59175b2ce5143d79318682ae544bd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-179330 Malicious code in unimna-saof-naioagis (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8493ba1ec4fc0872b389012e97cc81a3f2eaac69334e2e8fd4fe4f10bd1acb90 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tray-iutup-npusadya (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 494c8cd2b5fcef80e56ca888bdeb87e756fc05425470ffffc14d264657a7ae8a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in poglymer-ogminmh-amamofoja (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0cd9cd810fb815d7f416569d07a834901eb5286c4613e3ef975140af048db713 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-173387 Malicious code in buta-fbna-gafida (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6d2cb6f0cd0ae98e4955629d863b3ebc3a22af1de76f39dc5f17a156a98a976a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-175015 Malicious code in irfan-poke3 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 96223725b029e497496127cece7eda48e22d176511168e0cbc294b69e3ba55d9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-178066 Malicious code in polymer-ids-drgaf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1902611482a62127cb7d36f84f2a68e042e376a7287cd6f3a84f53cda1c99c82 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-178356 Malicious code in rusdi-set-ru (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6f9d43452fb6cce6694246e6d2d998d029e4df6dbe932129c18aa25e57d8893c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-177966 Malicious code in polymer-gib-agagaada (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4d043759fbd2e801c6ab9410c5b899948f80b49ba92a5bc3c9b49d511198c28f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in poglymer-ognagh-amin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 09176cb5e314a748407172eebee9ff2ce97cf36ee4212a529073fd3ab22268b1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nokire-kaguya14 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 892e4848552c41be5bc300d2ad7dc71eeef00e805bb57988d09bdb93cf2f6b12 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in poglymer-oghh-fiffc (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d49ede547620fef7a5e07900efd676e0e66ed0487eae453ae3f8f21b03973b6f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in anaaaaaaa-salwa-tea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a1c0a97e81554d4e9ff9d8cd38d90b09b40f8f2da2e9dd91c43097ab1851901d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in goodafin-nui-gib (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 35407aa54e601e5927e46f90cd64cd7f3c09f1d9ed36d2957ba8598b120aac94 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hitachi-poke122 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector eb9e5ec1283c77678da5a606320841188c111bb708d62730651976727ed00f55 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in poglymer-ogih-afiamafdaf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c1532f2bbd01f3d621417a818e3a6ba8b0d84eb3d1c079e751138dd4050c5970 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nuilva-vmiam-as (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6d0d499c027cc9cd1af799247a6980bcb608b3d0f24e7598dda2646314453d6c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sumpel-poke23 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b46506bb402537bcc021b663aa507a7a8c7a1ba2ef8877cecb4cf3aae70158c9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nuilva-bavaim-rasyi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cf0e7da01e2512a04484d1d0cb33c8a9672bbe6f391bff7e8e8ab582ba26cdf8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in polymer-avoadfifa-abohoadfadma (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 68246f984927f7bce790ac473c1def9baedbf1e6bc22b380234ab061ab879959 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...