MAL-2025-177553 Malicious code in polymer-aagfhsfia-gaifgaf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b59ff31d960a0c023ef55b5a2479243d24c972a75090ef0b99e0a987076e107d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lookingan-konami62 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a566ba3b52e1e0d9782950177d9a848d02605abfef4a350d51303779e99194bf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in piluka-kaiamlbu-kiluna (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 20ae53d41012272d15cd524abdee23f3500981f3a6161440767c0d8da623a318 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in jwt-foundation-kronos-gravity (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d02bbc3d31e8bcc41e33fd6c91d9aaece87fd4ad899100435d7e8ac475172ffc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in protractor-dynamo-lyra-supervisor (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3bd3577ae452df631ceffc6b04b9bf8055b4794ac4bc1c794b37786a83638dd9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fauzi-ketoprak28-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a2cd993900a062756aea25e2514e73e9d1d6d5a383c32dcc18d624cba0b9c383 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-138531 Malicious code in zul-ikan42-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector df7719bfaa4ea2753d099d563832b1d3049913dc8e00855ad1ca9cd90e206e2d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in little_leopon_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8c37938b48bc08f839134d3f7c89ac824674fe123f843f2825debb51a5c1661f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-91469 Malicious code in umi-mangut80-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 567457c2afa1cfa6b76db0a15bc303d2e8df50604478007e342e846ae53cd6e8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69011 Malicious code in joint-amber-bovid (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a56330ae901124e9d732a548eaa2622003ced4591c4c5e7ff43149cd05f9b27b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sari-kupang40-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 052636b4652f14ca63cb81f80c413b1a148edb99cbc01c1a9a3dc062635a1ac6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...