MAL-2025-177729 Malicious code in polymer-agdagg-aahai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e8484e6f2d74fa69ac17a96213a907a56a073d94067f49ae7228831593f1e439 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-173497 Malicious code in buta-fs0boiuna-gauafioif (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 63f176e9a8699b023ca4c8ed4cd24695fc407d92c3e6da4f3fb12da56c942f9d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kupaio-kila-jakaiai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1a7b0c65bebfc2a1b553ea17ac566816608348468ce0841d32ba3f753fcfcb8e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kim-sohyun-memeq (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e6cb5b64113ab869583e87ebb189eb75513270c25e6056eec5d041f93ae37b9f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kapo-samnu-miavava (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 62df93ab0efa54e015b84a3a9f1ca79351f75c27f51c26d1691a5fd4f6b314ee This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kapvino-socni-fuvavihafa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 92715cf979e946a8ebb0359c12fc99803037f67df1765c61c5912e3aecd10a23 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nokire-kaguya20 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9568670d26338071c933750800f136cd7818e1c5af72cbc07cbb87239def569f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-176463 Malicious code in nokire-nakaoci9 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c13b507c44f761d8f4fc355f4c8a36d4dc473faa97f52abd946fdb419b5f1860 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-179249 Malicious code in tray-uozp-putr (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 243f1f495ef6c16ed71a53f69fe2436d6fc9fdfb61744f3f4bc05c34ab5730cc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in polymer-afaj-rofsfafa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9b48a4de9ac554d65d0063c6f77da4a9e4067cbfc3cf0b8df78738661496c948 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ira-35 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 98fc82fa3cdb6b849edaaa20d848c18c3b93c9da83efedabdf0998930a7a8643 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-176050 Malicious code in mibasdah-natua-munfsa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2716844edf130c421f6770bcc281754546a14bd74387eba1418b53401f7496c7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in divata-tugai-imiua (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ca9a3ea8a9b721e5868e2b3d1e2510695e2d83e278a89324a98023202053b047 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-179259 Malicious code in trui-tran-trap (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2fc5fb9b0523ce77ef0043ad638f7ebd6844a56085bb34a20f4eb5e63a416264 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hunimana-satiub-nabib (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3c44a45894af7ced51f900d7c110f146cfdae5644c7b9ed570bb30cc4a59d69e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in polymer-agiagaihha-aftfsafyag (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 284815cce4028f3a014bf457e4048250b6f68c436224e8b97747ec41260e2b62 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in goodafin-nuiyag-giftu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d2dae9cf934f1352257a06a752dbfb8a0e326b5eb2c45bdcdcab4f310e07012a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mibasdah-manasisgad-msidnfsas (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2eb103eaba1051938e775f563b882262dc66acb18b453363f1d83287de4cfc07 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in poglymer-ognagh-agaammi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 59c2c5e537edd1c0c0c68e8209f7dd95990cd038b25b53bc0e3c48afd62b347a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in butanah-fipidsdfha-haufuh (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a47297ab5af505eaf1ee35dba569edc4e26904dae64532a3271a09b2dfcd183e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...