MAL-2025-187184 Malicious code in global-polaris-spica-iota (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1c782e5acf5440df7201aeaf4eab97c6ad886082ad36c3af25de05758917d3db This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sonic-ijos-asanuoaf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 566d94f63c8b668556facea60c9b7825ee0c6d523ec6deb6bf263e472b060b11 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-183246 Malicious code in kisut-diufg-danuafoa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector efb552bb2186394012bf86335c402942eb575757974f1d993d1d296d4d0bf2c6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sonic-os-afisigafafoa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 51dc77fe91f8f16da94855493ee1d2d7624dd0bf33f56a0d7df7b6a5d0e76158 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-184185 Malicious code in modaiv-kvu-ibuagoufacab (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0d3495b80b43e68f38bb7df3cfae7172378ca21fe328e951dab43b3716e0dec7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-181445 Malicious code in baso85 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d8340c7c563d498e3f293603ba793c3250f073cdb7515cf33efbed163fdb1eef This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lookingan-jaja76 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 30d146715bbed35fc0e95e3058f1b3548ec394fc91194790b3d9a9ce2a0d4491 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in anala-akin-niluka (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3c77fa5d26022830e56ddd2202e49b17e828c09de6f7ab601b621600a7a83441 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nokire-nakao11 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f67c76fc4087adf7f901789c83797ed9ec73edae3769c8f7b3b382162aee9586 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-173520 Malicious code in butah-asfui-dufaufu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 24cd437c9842cbc2a6c71f438703dbeca093936f5e82d1640ed590b2023f9687 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nuilva-daerde-oafalif (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9ec633fcba298f059173b5c533b501f9c47039dc4f1ab2c193ef3e4e5f746f98 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in manyeraru-nutar-munst (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 746b767a262c446094c126ca7a76e058514edb46b9a16332b36a04de94663dad This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-178749 Malicious code in tanabufir-softafai-dubuati (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 83c9eeec500261ce7c52b8192e80175a20ceb1468c71394959a932d0d80b5cb0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in apasih-led-pokiari (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e5b6f747aadfde8cadde909f630ce4d92d1197b143a27283f5f64c2029b2afa5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-172311 Malicious code in augis-pomoi9r-nsusdsfci (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b25390d59c014f2bb40f84e21e8ad85439f5f60a202670a7438db249a0c52f24 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in isabellesanders (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 66217f7b5a49aae97a19595234c1d247cf1e7e5f826de00458fb8094f616eb5a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-158340 Malicious code in lookingan-konami76 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9d2befe997b99c81708962e18de342e28d2d0bf76c455f900a49a8199ab06394 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-169286 Malicious code in trevora-cir87 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d01cbd5685ee7d6754bd7080034e8da99eaf83b07e14e7b95dacd3f565d50383 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-157882 Malicious code in kupai-lukta-joal (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 71f4a28fc2a9419e7ef73130429994fd0ca2bca3cdeb1dfdd6f63e0eeaf42b08 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-160698 Malicious code in modirai-ignono-jaigi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 65140b5e098ee413a92825a3614e16463bed798f4a819e70211a89c11a9ac42c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...