MAL-2025-177571 Malicious code in polymer-aavof-afasofavbagdao (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fa1c700c83bb48279e2e4adebe63e7a63dec51e4930199b41b7191e6894d8e7c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in miftah-mipta2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 50c3d6441fc219da209b2876f5e7802ceb943278cd5bcf5db94fe955838ceddf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hunim-satf-anujafai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3e956b8a161434c9a4829e26074b39673c0e6f2c2f91d43bf4c3971108820754 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-178070 Malicious code in polymer-ids-rgaf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector da834e3b90985bb2f5625317a8b3ffc73eb030d0db219252be3913f35fa4beba This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in augis-pomoi9r-ossac (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dc709038c8e0090ffcaa71810fed819b1b6c07f758da42c1d861dd125d48bc30 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-172246 Malicious code in augis-pom9r-nmn (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ba8569be45fc237102132a1b2a9c420e2b3d51c4d26bc10a9cd784b6ba38327f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-172021 Malicious code in yasminputri (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 71983cec34b33e62a62517e448089312862b3ffd6b17996f7d54c45bcad89bc3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-171507 Malicious code in lisakusuma (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7355dd42d8f87629347fbf5b89586a3123f1745ca029b35c2a31282264802773 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @miptaa02/asdfzdy (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector caf73f336c1dd1acf4313987d10f1c94158e835135681909189fe38b66e33927 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in abeh-poke4 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a461eb65fd7d7eaaced60d54cf48d4df3a7d4abedb537c2a89a1f2af72be8009 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in arif-poke24 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1bec8c4f1672f5a2356d9ad9eb3dddbcd27d9a7d4d1d3b87ed91acfcf2f8beb3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fadila-poke69 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b9ed56c8b2a5cc3aff48c79836fffa8bcb737a4af149214769f4c3280e8ad771 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in layla-poke96 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d91c0f3e3f1a9a3f614eadc1f2c281101c150afb9a75f298cbef921633f1b9e5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in manurung-poke74 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 78f11435feb6d121b873e906d6b88519435bf1a4300193386c7be03c8a8cdbde This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nasrul-poke118 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 414cef0b309c9ae0b3a6b05c08479d81bfbbf8ff910725252e8c32aa67889842 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nokire-akaza86 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a28dde05e5c2f1cfae893875dc0c01fe9147f8a3e698e23e012d0661254f5754 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in saku-aimau-upuasoanmio (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 35299010e76a45142a3719e287b2d448578f3c5c277df5b074f5c1ecb70d3c20 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tealove-aruma9 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1da210d90efa282fe8160756200afd1912cd237e0a7fb0f045501ed5303605f6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in uyafu-tuyadat-datut (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c3edbc52a7133e4b9240daef7a21cb47b4dd791d77cea7f301f6774e024be53a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @mipta1/easgr (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 457d0975d6ba650be8ca3010c6d189b2e55c46f5c120f8ea3fbaebf8727c6493 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...