MAL-2025-177492 Malicious code in poglymer-ognagh-amifagn (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d21940f1bd552f6276659975b66db617245664bfdfb8a4318f92cfb32827a8dc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-175818 Malicious code in kupaio-ulokia-jakali (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 01d06e4afeb2116a17b185a0d86831bcf73236c1f8fda434235406d7c22f7a63 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tanufahuir-sofai-dugfofa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 93a129d13d53c7211a7249dc7b4017316416cf3dfa0960b38e0ec588a6105ca2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-177612 Malicious code in polymer-afahof-rafga (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0bdd6bf1678d04f7957d214f988fe4f39da0bfe73379699c9f59d63aec0337fa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-172827 Malicious code in anak-jalanan-mdn17 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2b129236f0789e611ff1c984aa4a97f0c78b2733c7940aab35df933557cc0f3b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in namei-mala-abubiau (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d1d8d5697bd31ed3bd998d899f073aabfa281a43193f920d340641014d955d20 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in augis-po9r-muno (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8084b043ed4486b6295050584b7f5bd0a5c0dc3890a0052562e07d42ca42b360 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in messi-aauta-fuff (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 54f7d4ac3c03971d8e9a021b2c338d97ddb2573581bd9760619e76f54a95c269 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in verify-tac-malasikiblu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cf1848278c34558fa344142dbfcdae0b480d5eaf718b48ba095c58444fa0e85d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in teagood-namakai87 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b3ca9fc6404774d2a17d8eab505986e185191cd999604f18b616f429ff0906c0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in abiuna-mobile-ama (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7edb5cdce5cf18435aa36390e4fe26001ec5021b67be4362cd89253aa4aec761 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in uinsu-lis-dakinu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e0756e862c791af8486ddba6ba5b1df52a8eda0e72ee4947213af11c81947dd3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in billa-30 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e262086b55578ac298b18c1228aa197dc51a3760eeb72020a4dc5615bfe140d9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in astia-alaki-malosskiafa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector efe580e776047e96bf7b1bc865741a0c694cd482a8afe41f3f8f858629d6ef14 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-163855 Malicious code in nudla-ofogir-agua (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fdd8fecb1fe8057e0899c987630a39c7f4cf0796e07e1ad25eabc5fbb67f5c23 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in arif-poke22 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ffecac563896e81d8eabf809aab1c54fb1f4cda0e7efab75d4aec284581ecef0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in icha-53 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7707abe748297108c7d04f282d77fbd5abd76a15b579e172fb5566bad8e5adc3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-161844 Malicious code in namasae-namuda-ssfas (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4bd31b20c029447ffac0b0a77e0edd63eb0bd2d8ea1033799d473eea391018cf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-166582 Malicious code in syahlan-poke79 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 13319880cae03296b3c5c8320aaf8e397ff0373a195c6c9f79632499d1d2506a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-164532 Malicious code in prayoga-poke34 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector af8a216c4b5e4647dbc45844cae8f88c26ad54bd25a2176bfc61ab81ec6f1c7e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...