MAL-2025-178049 Malicious code in polymer-idasifgfa-raadaf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 97300f8134504de5e08319fd5337f6bc9df6ed365b1f4ad7559757f0be8f2a49 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in guras-nitroac (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5532b973a3984d8fc589677dfb23fcb59c2a34182a491f9a604c4e7202c48654 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-161321 Malicious code in nabuf-ogauf-doko (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 001a018c59d9258934a42864742486e64bcc83747a6cbc5f75c2fb7af8e5e9b2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in okta-martabak96-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d96ee64f52d842127e06ec90e286bd0e0cc51c26562c4cb8c5f3eaeab6c79318 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in huge_scallop_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3f5784dae4463b992cc5c3f0e42918b820e00d3df248b90a354eadc63913f839 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in irma-bika70-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c930ed4e5167c5bee108ab7fa1846af6c3de86ce41c894d9530ff99a96c37f2d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fadhil-jus80-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 267677540c2ebee678072a325b5650e3545414ede71ab926e37e59afac38b467 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-120191 Malicious code in galih-nasipecel98-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e0ebf0cc5fba379e6fb5f0da48495b89f0d67219b0da05c7b6c535718426ddaa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-115072 Malicious code in joko-semur23-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 96d151a6071486115636569767aebd94e9e156eae43d96e1e71db02c0cb3d5ee This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-97926 Malicious code in indah-nasisayur14-tititugel (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fa373a6bb05a268d85aa4c0807001812723a092ec310ec71b793ba735bd752b8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in obliged_viper_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d2e1280eb9992898025e56c389d029d6cf120fbcdaa0be98ea75f9ae6626bc49 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-89133 Malicious code in ogi-tapai98-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d404bfd04a76dbaaaaeb3623f9bb60a54909c1227c988cb3f157afa429b3cb80 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kurniawan-lupis70-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d0ef5607db06312238e3afd4d1d291a4a38a362e70e525d5e1ed62874da5a3ec This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in vina-kue12-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 16fc8643f8f648d849f3dbea89da97768c34f0b27fac1780b0872f6434aad8c4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rudi-kupat9-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 983f0ecac2e2d97b3d3e3226fa07899b1110726c8eb9f6089dd5a8567ba63104 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...