MAL-2025-177957 Malicious code in polymer-gfi-agka (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cb87fe985ac8b56ce9913bfaf6a0674a2c71afb7b53bd4eff04f9953517f0969 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-173820 Malicious code in digo-kaimi-liabokaam (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 054efbf560a988914435a4e4dfcfc982a3b39f71251a09d75791c68db34cf244 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in butry-toi-milo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1ccbc6875111697d59681fe31c7d8ca2ae4a3534c7b0ec7694bcd55ab9e00b07 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tray-iutuzp-teru (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1ab1100061eefce4c1857931bb852f2a305a60d66939af1a249a22520ff0ebf5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in anehhh-putri-tea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 57751ce78af026555f97b574b057b98b6ceab59755ac451c38df88e166896c1f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in polymer-af-rdaodd (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d2d49799b747dda09f2c0b3e216b72cc3d4bda1d8f42b063e34c62b37e5aca06 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in butahu-asfui-dsfh (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0db5d2e296013ea6553ad0b2ed6e5e182d03cd95f9068c9f94d5bec1b9022ba8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in poglymer-ogmimh-amja (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c77ed7f3f265f092ae4234afaeedcf46871eccad1e0ddf5efce8c7910c9a71c0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in polymer-avoadfifa-abodadma (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 093779c67145eab9612df8b5ec0a8b8693f52b790ab4bbb2e6d94caf7d29149f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nuilva-buydia-manahayav (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6fb98eb2c65cae9a86eddd74cb9d42a3aa91a851afe4fcc8acd3455f7b219783 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in polymer-id-doraemag (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e65e6b88910aa1f36b5a448eb32bb71ea93f0a4f8935f5f501438612b280e782 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kuku-poke4 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0fb79ad4ba9b511fbec559042d8d815d4a8da98ce876208b7275bffb4c0112ad This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in goodafin-nuig-gibi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9ffec18c4de76b888456cbc43dbf16ae57bd1e7fd008f5190bd65886d3476a54 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in buta-fipofa-ihasuah (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 12cd9d8b118af926c91ecfde9b55e79aabe15cc6ebcd7c28f52730dfc129e757 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in polymer-butyafsa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ed97e4950ae8c5679fb7a2c46bcda1d41c15412e97684ecb1bdf0024a8a35bc5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rintono-poke93 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0d8f4a87c9ec97fc284427954a869c2cbe46b62c42d928e4ff5f120c35ff85af This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in buta-fippoa-inaufa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5c36065b481e6a544d64cdef291a15ffcf9182f460687dd421cc83832cf5ad03 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in polymer-avonf-afofafia (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c01a0607db472970448c758c6ae0f784750057a93d5fde6167e74113533768db This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mahiyaa-sutayu-gano (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ade9f6d550ab1ba12f9d9fe7dc2cc7acebdd6deac68f85f326ce08aa6070640b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kapino-samvnvu-bibi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9dc1b127c267c576365861877d62849941f52ec19e975a2571a48ce93a6aa0f1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...