MAL-2025-178317 Malicious code in riya-36 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fd1cd7b622e53299618726bbb7711e4f062036006ec0f60a42aad6cefc6fed04 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-177362 Malicious code in poglymer-ogihh-asifa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c7abf477403b3b6ff4abe6f2f4dd61ccba9096519de69eeb7ec459f20c084b0b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-176468 Malicious code in nokire-nakaocil13 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e64cb156df2086796bed4f38c8b460228fbb621a4d0ab5e461b4a2efa4cdc77e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-177912 Malicious code in polymer-datdfadsid-dora (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2391ff8005197875595bd3f446b394863152251b6b323adc9af31e703cbd32f0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-177288 Malicious code in poglymer-ogi-gagofoaa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9c04519c19c6c1226e6ab68cae00d972ca4a501bb9186920fcaab30a7d9b0335 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in aps-leod-nufiao (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7a3b8fa68f02301e32113f497adc7f7c2ddd4ed923389ee20c790ba8aded5f74 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-172530 Malicious code in verts-otimgo-naofg (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aefb31ba79d10d6aebdf1e40ba272c1f56ca427b87d00a858e348bc2a2bed559 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-172120 Malicious code in apasih-merahd-grsale (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 27d889778cbb781c565ab245da62758af0316cf2c3909b1f01621e86f855a0cd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in apasih-led-poldoa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d533c9e8b8a3b8ab48c42856844435ba4e3aa3abb1084aa0f6a9aa0e57485d11 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-172252 Malicious code in augis-pomdoi9r-mana (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3bcc4c879252835790385e7f8a46f99fd22b0fccb40792817c06d5a6aa95c72b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in anushkajain (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 549f28a441a60acf5428862f95f380073340fcafd9a317ab27f76c808efcb11a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rehmanakram (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bbf768dc279c678baec912eb7f045b9927e99d6877515c262fd77e299d69f5d2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in galaxydreamer (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cf4389cf3143f65e4c75bfa8a8da4fc732023ef484c8b130e1ca83fcf5637c5c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-171925 Malicious code in starstrider (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1df7785b8f560382d31ca5d0bf67a9aa6094b82cbb73d46b0b50fec9857be76f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @mipta19/slv1r (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 571041fae47cb37a94f3b38228a76e1e6a9b3e46ffd0b2074b00334dd5bb5453 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in astia-al1f-danik (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5d40bd90107a0ba1a254c59e5572244af9fd9c7f9ace28f5274bb6f7c66013e4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in abang-poke44 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5feae165959f91b9bbcd9e694481264fb4017149d7e9c50a4512af9a64536596 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in gifa-otau-uasuadfo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5fca2605c9dae3d3d327f343c2b918ffd23078764db7f04f38416537434f212d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @miptaa02/xsffhgffvd (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 49cf65279c9f1a9ed46e22da9a36191daba16a01a4245fe8bee4d56bb41704df This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nuilava-dakdre-nffamhaha (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2a94a25dba8db6b463c34d812cec5c5be8c38ade1cac6b99fb05a07d52b4ff6e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...