MAL-2025-187184 Malicious code in global-polaris-spica-iota (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1c782e5acf5440df7201aeaf4eab97c6ad886082ad36c3af25de05758917d3db This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sonic-ijos-asanuoaf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 566d94f63c8b668556facea60c9b7825ee0c6d523ec6deb6bf263e472b060b11 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-183246 Malicious code in kisut-diufg-danuafoa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector efb552bb2186394012bf86335c402942eb575757974f1d993d1d296d4d0bf2c6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sonic-os-afisigafafoa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 51dc77fe91f8f16da94855493ee1d2d7624dd0bf33f56a0d7df7b6a5d0e76158 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-184185 Malicious code in modaiv-kvu-ibuagoufacab (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0d3495b80b43e68f38bb7df3cfae7172378ca21fe328e951dab43b3716e0dec7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-181445 Malicious code in baso85 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d8340c7c563d498e3f293603ba793c3250f073cdb7515cf33efbed163fdb1eef This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in anala-akin-niluka (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3c77fa5d26022830e56ddd2202e49b17e828c09de6f7ab601b621600a7a83441 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lookingan-jaja76 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 30d146715bbed35fc0e95e3058f1b3548ec394fc91194790b3d9a9ce2a0d4491 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in manyeraru-nutar-munst (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 746b767a262c446094c126ca7a76e058514edb46b9a16332b36a04de94663dad This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nokire-nakao11 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f67c76fc4087adf7f901789c83797ed9ec73edae3769c8f7b3b382162aee9586 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nuilva-daerde-oafalif (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9ec633fcba298f059173b5c533b501f9c47039dc4f1ab2c193ef3e4e5f746f98 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-178749 Malicious code in tanabufir-softafai-dubuati (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 83c9eeec500261ce7c52b8192e80175a20ceb1468c71394959a932d0d80b5cb0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-173520 Malicious code in butah-asfui-dufaufu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 24cd437c9842cbc2a6c71f438703dbeca093936f5e82d1640ed590b2023f9687 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in apasih-led-pokiari (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e5b6f747aadfde8cadde909f630ce4d92d1197b143a27283f5f64c2029b2afa5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-172311 Malicious code in augis-pomoi9r-nsusdsfci (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b25390d59c014f2bb40f84e21e8ad85439f5f60a202670a7438db249a0c52f24 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in isabellesanders (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 66217f7b5a49aae97a19595234c1d247cf1e7e5f826de00458fb8094f616eb5a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in arif-poke83 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 44ae3d30e498943380f214e38ce90ce0abba70d986095fa4817bf4045a153c6c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lookingan-namala68 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 20b183d054c1aaebb3064affbd475b26ea7fc1bc09fb33959933e31f5127cd31 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in oalgo-kilaso-akiamko (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 53da054e491504bb3acb2e4a6c5403c300a4d06cfe3d1c233e0cef3bd6d97dac This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in syahmuda-poke29 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cc719f15c2a95caa13b2728c2559ec6429aec6d4508bcb908722192e77826919 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...