MAL-2025-174307 Malicious code in goodaan-ngusafa-ndgia (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cfcad3040dcb5b58602cfb03b836d973f940af6cc286e7b677f91ec8da6b03bc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-177783 Malicious code in polymer-aia-afg (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 97fc6b1e5779f7c11c4bbff886f2091d207edb790e44e447a0c8a2a0cd4da3aa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-178753 Malicious code in tanabufir-softafai-dugaat (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6046c7397d1bb5cc80014c2f57394ea21b927a85176a389d855acfd97b99cd1e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-179044 Malicious code in thambi-busrt-fgfh (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 67a3754e69ff31341451fc7a5b04dc1348b661cc69a12563d93b27ec3eea44b4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-179344 Malicious code in unimna-satgub-naiguanab (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1642b125e28ebc00e1a173312b6e29243e622833e0bd5a2013b5cf04d33d1ae8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-173055 Malicious code in anneh-putri-tea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3c2f3fcd1e9af579b605ce7fb3c2e238d1b306c5ffe569ff4c392d5f46d390e8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hitachi-poke122 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector eb9e5ec1283c77678da5a606320841188c111bb708d62730651976727ed00f55 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in goodaan-ngafsa-nf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7d56343ab8082bc0be4f6097ec2257b3fa3d8d3d993e02fd1725b7b03a142b82 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nuilva-bavaim-rasyi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cf0e7da01e2512a04484d1d0cb33c8a9672bbe6f391bff7e8e8ab582ba26cdf8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lia-2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ed90ceadf6cc856cdbeb306b136d40a27412e8c48ed0d0b7dffab3fc70d5aeff This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in keke-poke16 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector af0cb4ed302bff7988139df718277e2fb9d771e45d1e7d28ad5b253591db87b7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in godi-tufam-iuu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dc8e578c68951164d350fd046607240447df7b5fb2c855dc2fc308b66850d027 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in polymer-gibog-aga (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aa0dcdf7b979ac21945138232f5c2fb7f4dcb01f2355aebc3a42c08f0221d577 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in polymer-buyaita (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1724eb1d260e318e95fb5644f3707c33bf07473d47a393ddd5c75714eb1ebc9c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in miba-minfas-msidnsas (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c5dc2e2ae5bdd6f372e81a23ce9a583f7e3f633e034f0a627e462dfc0beba72f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in zaskia-poke2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 546595a318228c8cdcd08a893f6ff0b827c710891520dfa99cdb1d0f0955f0ac This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-177727 Malicious code in polymer-agagg-aahai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 374349d0dc7df45f1614f96b59acc6388a208d3133cb60495a17312b60ce2790 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-174904 Malicious code in indah-poke15 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f5d902b03aea520e5a6e6cd60b92adde7b1c2d6ac6c6d720f2936cffbbe212e0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-177319 Malicious code in poglymer-ogih-gafa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fadf403b86c75bf95d582bc90755e68a7244d95aba618e9cd3523d1dc8ea5b75 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-173580 Malicious code in butanah-fipmofha-hfuh (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c3e227b2f360486795659b1512edb033f5bfe7ab248e096ba4e4f3d1aef99fe4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...