MAL-2025-177283 Malicious code in poglymer-ogi-agcgfkaf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a64f9a139c2f1774c6a22890be9df95c8c610a0e55edf6d92201e684e619ffce This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-178493 Malicious code in sahua-satud-fado (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6495e1db61ef1a8d9fe71c55bd035e47700578f0157fe4ee3249bdba2ade26c8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-172832 Malicious code in anak-jalanan-mdn22 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 601536c62ab1efa62b1756d26025e7a9feee4092e127737564f38175188c0cdf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-177284 Malicious code in poglymer-ogi-aggfkaf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fea729b82386d0e7637c4a5a6dbcb457c6dc02ac537c2ceb4aa50afd59018628 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-179027 Malicious code in teriu-txcui-pix (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0658455ea30ee1b7d15bdff1d09f098d3af3a338e54cd5ef3de2e2a2bb445218 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-175303 Malicious code in kapvino-sofagfgdi-ugaafaoha (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c775c1af1674813232b01153d30a8776a871165a7c02a23873fb7373c76e5f45 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-174646 Malicious code in hitachi-poke128 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 58226b1eab7f8f322ebdd4c3710cffcd61f57c9efd301e111bda1d70f246e7d6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-172753 Malicious code in akkkku-lia-tea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 939f387f01905f35ee6bb9b5d1e74534585a0f0c3d2ea29fde8054f95243a744 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-173641 Malicious code in butanaih-asfafi-dauaif (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9c8ce815577b2b8b6b2b2e8749410ed4a618fac5d8399d2bd5634a282b02b456 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-174198 Malicious code in godi-tumva-diabilu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 866a42110e39155d6cf7d4d75a8de04707160d10f50483fc0417c004e77d768d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-173808 Malicious code in digo-kaim-liamkir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3a132fdd3c9bbac57de00bafeef7cbff70b153fd8b5bd9d53910550cc021ebbe This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sahuar-satidaf-fagubaiao (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a4d45f1fb8136df3dc7a8647476a516bbf215f712c40d16602682623bd592847 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nokire-kushina1 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cf6599f4628d211d235793865d4bb6e81e07fa542e2bde2a0d2483a75b0dd23c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in butry-posiy-idupy (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 23149dfb5e6bf224a5cca0f63675fa37a5d40b349d9339b0a08ffc70068d8e5d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nokire-kushina30 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a7ffcbdd93e85e1f2b3458175665981fd4640c02f94e29900cb5dbb86439a144 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in polymer-agiha-afyag (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aba74381d5b42eb10dfbfe8959a52003f5e30af789c4c6bae81ece041b13d905 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nokire-nakao50 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bcecda826671d67d43c380fcf769a5463e9a118bdcb4dacfb102796f930ac0cd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in haruni-poke112 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ab65cc21927b5fe780056ba8e1c79d6a0dadd9c3e4a5d1827db16a510a7351ac This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lia-51 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector eb1d6119a73d2a30812337a5e563408ca1e635690923e87910597b98331229f3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in buta-fs0boiuna-gaaoif (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 659ba8170b8ca5a64e5f381dd0cacd00ce98a71b8d39297640ff436d707ae7d6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...