MAL-2025-177882 Malicious code in polymer-avonf-ahpgaafo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a8d69d611ec05556b562cf760c5e7394c9407f87d0422c162d51e60f927a5b19 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-173530 Malicious code in butahu-asfi-dufususu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 06226fa9441155d5c14763b5c8a7f8c19efe260a6976a5abc4522ba8299c78e7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nurnua-sutif-dagai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector daf67b3537ee84ea2c7c238644600688e255d1215709cfb06871e1ac1c41e988 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in alvino-48 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4812eb0c44d4314d8a4ff0a2919e06864a630872280cc084e6362638d021853d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in polymer-gfhgai-aga (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8f82b0c042a661f9c2fb7fd7ad22b496b3ad5249702fa16c41e678b6a80a13ca This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in poglymer-ognagh-agammi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 30e28f7654891b197d44424ff52866245a0dbeeeb19f6d1aae7b53c7b9257577 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kupaio-ulokia-jakaofai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aabd98d931d63618ae1d99df529255b5862bea427b71e1afe751d4210cf9206a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nokire-nakaoci6 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9ad2b294404c7f936b697c1ebe5c76ec24410372306bfd4c001534292b358619 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in irfan-poke13 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 319c238258bf65ed35aa1d8e9874d70bd3732b9fc98504d81df08da41d88d22a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in poglymer-ognbamoah-afiavagai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fae60ea6f7ff73a6b0bc4857aa0073a192849fb1b1b4d60a323fb4a98afb66b7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in butanaih-asfi-dafu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 740de00980313dfe226e197c95b71d7e3e2075680259aa35fb479d385dcd44ee This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in goodafin-nuiya-gifa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5e2a35e628460ea35948fe6b9d029814253cce249bd70459f9d1db895b0635e8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kapvino-sovni-farvi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fee891e0db4b21ab22e6dfdfee333d319c16dc4134ea9018227aaf04f4baa2f1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sahuar-satia-faguao (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6f72c777b4776325d93f80493965eae4ed4d203d182169cb2679d60488078db1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nurai-sutaf-danabia (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 234230d6ca9a72313a64dcddd488a4d1a3f7e5208f8cc76e4013bd81e0d69a51 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hitachi-poke104 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2d56ea2564e895cc8bb966113b086b57df39d52d897b2457fad5cc3217308453 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in diva-banbfo-imunggsai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5d7876c6dfc2346864cc4b870db1615de7db7fbafe629cf5da7b22712b2b01b0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in go-tumva-diabilu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 45a259407d5bee0272c1c54dec3bdf3bd9d93efd1c99ac059e22badca298543a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in zaskia-poke21 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b4f9d996224353f6e1778107f719c0024707f240d65d28412befada48360fa7b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in abdi-putri-tea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 67b2ef1f436d1b9d9fb9bd4903e90af76c8cc31d5c3d1d446d549e4307118d55 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...