MAL-2025-179344 Malicious code in unimna-satgub-naiguanab (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1642b125e28ebc00e1a173312b6e29243e622833e0bd5a2013b5cf04d33d1ae8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-179044 Malicious code in thambi-busrt-fgfh (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 67a3754e69ff31341451fc7a5b04dc1348b661cc69a12563d93b27ec3eea44b4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-173055 Malicious code in anneh-putri-tea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3c2f3fcd1e9af579b605ce7fb3c2e238d1b306c5ffe569ff4c392d5f46d390e8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-178753 Malicious code in tanabufir-softafai-dugaat (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6046c7397d1bb5cc80014c2f57394ea21b927a85176a389d855acfd97b99cd1e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-177667 Malicious code in polymer-afavhof-rafgaavzfgbo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 390caf3e984b85093c95319434dc7d8a19711bff7b1d73e319d4682b2f3a9569 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-177783 Malicious code in polymer-aia-afg (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 97fc6b1e5779f7c11c4bbff886f2091d207edb790e44e447a0c8a2a0cd4da3aa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in polymer-gibog-aga (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aa0dcdf7b979ac21945138232f5c2fb7f4dcb01f2355aebc3a42c08f0221d577 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in keke-poke16 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector af0cb4ed302bff7988139df718277e2fb9d771e45d1e7d28ad5b253591db87b7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in zaskia-poke2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 546595a318228c8cdcd08a893f6ff0b827c710891520dfa99cdb1d0f0955f0ac This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in miba-minfas-msidnsas (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c5dc2e2ae5bdd6f372e81a23ce9a583f7e3f633e034f0a627e462dfc0beba72f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in polymer-buyaita (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1724eb1d260e318e95fb5644f3707c33bf07473d47a393ddd5c75714eb1ebc9c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nuilva-bavaim-rasyi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cf0e7da01e2512a04484d1d0cb33c8a9672bbe6f391bff7e8e8ab582ba26cdf8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in polymer-avondnf-abdma (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9232e96e707f9d7389c01f0db54cbd9674fd3e3d3de7e57ad7470dcdcd4a8343 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lia-2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ed90ceadf6cc856cdbeb306b136d40a27412e8c48ed0d0b7dffab3fc70d5aeff This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hitachi-poke122 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector eb9e5ec1283c77678da5a606320841188c111bb708d62730651976727ed00f55 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in godi-tufam-iuu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dc8e578c68951164d350fd046607240447df7b5fb2c855dc2fc308b66850d027 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in goodaan-ngafsa-nf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7d56343ab8082bc0be4f6097ec2257b3fa3d8d3d993e02fd1725b7b03a142b82 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-177583 Malicious code in polymer-adag-sgdasdi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5289e5e29791b66a25aa4572780015a9eb8fd6adafa8558bc3e24a453991dd05 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-174904 Malicious code in indah-poke15 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f5d902b03aea520e5a6e6cd60b92adde7b1c2d6ac6c6d720f2936cffbbe212e0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-177727 Malicious code in polymer-agagg-aahai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 374349d0dc7df45f1614f96b59acc6388a208d3133cb60495a17312b60ce2790 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...