MAL-2025-175520 Malicious code in kim-jiwon-ba (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1f93edf7705a504bce7ea5062cdb7a4b9286d4ef99024cb3a007c68fb574c421 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-178770 Malicious code in tanufahuir-sofai-dugofata (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3d07ee76a61dc52d1316732c9644c7cd7f4aca4575f62f0b5695dd148b35002b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-178035 Malicious code in polymer-ibhghhssbo-sgahsdi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1d3d5b89fe79711d25b47efe5b4487ee17ee5aa49578a9ccf7dbde29d92816b4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-177653 Malicious code in polymer-afajf-roifafafa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e80e101853696c23112294ab1f2237255b4f1f3cc3064bd47f7cfb0a46df2cda This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-175166 Malicious code in kapvino-soafasi-vainafcadas (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f871e5f7ed5685b0fe6f642e0af63c275d5582f792f129e4382f0a4503a89c9b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-173450 Malicious code in buta-fipofa-ihauh (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c71691b3ca72be52df08d3f097a1836ac9d6a82386da044f3ecbe01d9e31f22e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in goditu-tuamimva-diabud (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 67a190215345284146760451c15dd1825f043937e83e4c3fa7887c471edd866b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in diva-tuai-inj (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 40416b778b3a2fd88171e779ea85f66c500d9c210126954fd6f9420be63c6c8b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lia-13 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a1e276adffa1807ae0aa750b900b6d2ddf9ba1617edc043fecb949b450c333a0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in haritono-poke10 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bfdc0dd270cfd68c3c6bb10f696698f7ec985f4494193568c34b85f4e1e9e725 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in digo-kaim-liabokoam (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1c218fdce2e29ede66105a77707712a5acedafd33ad8abccf6821862311afa6a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in riya-28 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3d4bdeb07e208f22088e519b4e0dd13e0b2d4259847a703638727f44112957ae This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in digo-kaim-liam (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e7860a93a2d896aee0d9a7d66bb79553db7ead95b4fe3a6d5e1ee30a963a9ab8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in diva-banubo-imanumbi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 408174511e4eff0696f1a8e4b521aa5ffd71accca1847856d598d07122b477d4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in polymer-gi-aga (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2d7f1173e914293848277dc10dd55f818e7011f187015e39d1612aa37e46a612 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in poglymer-ognboagah-agsagoai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 044feefffcd26d1f7b5192fdec6f3cf01844da412a727054e7afc4c7f375595a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nuilva-buyavad-manha (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e52405856ca6387c6ac0511f62496f5eb64254b2a3ce74fef3f21cb2bb0da341 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in buta-fna-nafa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7ead12277458a90b94368920cb726bb720db3c343b150c94d4831a9dc184802a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mahiu-sautug-iafagugf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e334f2619b984306c1497c95a4e005d464defeae23f4b889dae24d65a9786c52 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in thambi-vsers-tdfuyd (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c089c174269c8a078dce07144b7428b0c91fa34b820bbec7db1c1ec0edd71791 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...