MAL-2025-177203 Malicious code in poglymer-ogaguh-hiagagn (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2a922a5ef7f6434f1be39aed43daa66cc9d0a7b32c1a49dd557de2006a9b16b5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-175717 Malicious code in kupaio-kula-jaoi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4eeaaff83149ea4289a6727f1aa2805c3d7d13c4cc6c27f00264f38fd66f6ae4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-174208 Malicious code in godiatai-tufam-iubata (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ef2e82251fe80302eece89ffa0d87d59b063fc95716339e3faa8b865c1ab5906 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-174962 Malicious code in ira-23 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c05b9b1000d5f9be9e40ab5eb2d9fb3fbc1757fd62c2acced101f7d1fb24e367 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-173118 Malicious code in budi-kon-rusmaya (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4cf5d8207d09a1b8c5e706b70c2a594773a5af9f7a251bd7f9245d307a401c82 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-174040 Malicious code in divata-tuag-iviga (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 36012afea56d2b05d1f55ad8762b7a515b91681320488562a75a8d98b86ad1dc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-172765 Malicious code in alvino-16 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a2c974893b7813820b52b658cb70f65ca5fd4d67b95e6cb57af04e6d3de79439 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-173594 Malicious code in butanah-fipopha-opafasi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ea08a0424363e641e978fd3851a04a70890eee916ea8ddcc140ff4ff4edca0ce This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-174160 Malicious code in godi-tuam-inapupayu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c9b22c78d28e8fc425dc4b90b54748910509e0aaacfb4278848355eebb41c7c6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-177916 Malicious code in polymer-datdfadsid-fdr (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f0dd403a83e439d002a2df7166984a7160d0f55e1d79e6ab588234416e988689 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in godiu-tumva-diabilu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 743299bb9d56a843d62bec6a0d422267495ee78b798d3e080816ec25745942df This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in goodain-nusaia-nubi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6f7fd60d39983181d36b020009e4aba910366b376988755cd8356d8c455b5523 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kiki-poke25 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e8a62a35653fccac8187cd1a0c720207f27034b2fc33495067ecbae23e778823 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in poglymer-ogminmh-amamofoja (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0cd9cd810fb815d7f416569d07a834901eb5286c4613e3ef975140af048db713 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kapvino-socvni-favi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f8e3598f6191dd2a7d81c2dc922a650b3a8ac7fb99e020bb6dc413ad50ac04d0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in diva-bai-imbufabao (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0f00211b24a5afc735bd1b1c76a838b56b0521e730aadffc52d7111c1f5ee91c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in poglymer-ognagah-agaami (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 63f786bc92715c2e2f6cf6832be3cbbeb841ef1c4d246ad31921c3848ef5a6a9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rindaman-poke2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1df2451a632052d8124ccc413ebb8abb891675e8ba0741bca340d95294f915aa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in poglymer-ogaih-aifa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e7360cb8f9371ff31de9c7731a04174c1704c887e8e11f204f6a58f1ce96d324 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kupaio-kula-jalaoki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1beac6b2462c41ec916683a801172f97fef03ce17f10dc9e12202e6b082fc245 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...