MAL-2025-177229 Malicious code in poglymer-ogaih-afggagi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f23e234a00624f3b5855c63f8c08b1d5c70c2464cbf16f2feba8edece52f0951 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rintono-poke89 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a1da52e4994b4ebc42960716455dfd3a84ee60e1ad05b2901b2c228f4ee7dc13 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-177920 Malicious code in polymer-datdfsadsid-raadar (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3407d3714f07af923c07d0971fcc52c312c03361493ea435438b1f0a19575155 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-174195 Malicious code in godi-tufufaja-inubufaaya (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8c54bbb75d2f87b2576f93ee928be1b2a28a603d45bc865ac54a627359a7f61e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-173231 Malicious code in buis-suinana-madbumovfa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4fb8d18a558fbdfcb2a16d50b8705021c89e1659538779ab90b36414415986fb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-176304 Malicious code in nokire-kaguya14 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 892e4848552c41be5bc300d2ad7dc71eeef00e805bb57988d09bdb93cf2f6b12 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-179198 Malicious code in traay-tusdy-tryzu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6ed732f4bc6782a69e39cb7313936a35f7a1eeed27cd9e2e85dbba01ab1a956f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in augis-pomo9r-nsussfcida (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 72578ac6a987701d79be199bdd2ece9a8792e6600a197c00ebbbbc9ac46bc218 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in apasih-merahdd-pa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bdda12fed28ccb4b14629aa54bbb8544e928f69f91e97c14e668f9bfc8b4fb27 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in namei-mala-abinaui (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3ec826fc805116ed2dc1730e82af49daaa9e1a0f86a6c8252cef1bc18854a81c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in augis-pomdoi9r-man (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 176dda5e83fe0c96579d19f15d68cf8fdd970ece3e012a66f51724ed6bfdd83d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in afdalhameed (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ff70a755655e9bc81075c4aa93de35490007cf3d7bf3cc45ba38c55e26c68570 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-170850 Malicious code in amjadkashan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 576b633e1607c6690c2a1b6dcc9e7c9cb7de71d51205051af098cb2e2675ead1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in shilang-poke8 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e207bb145f9a93c0219788dcb46c286f2514ee30e89b521afb254101a58a99f8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in alfiansyah-poke92 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c6a6812aff764d32ccfcba5b5461fff62277d813644212c68e3209f5e0f39ee6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @miptaa02/dshg (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fa14715a954cf387f3957548a922ab0b51f559f940e6d9ff8e2c5b7b86f4208f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dajouka-faa-sa3a (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 705c2f034ffea819555a1309c6a9df958b47473603ee46bfd57c218a37fabb28 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nabuf-oguof-dusagomo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 10671c4b732a3f2d2c6ed6434bf1a56b46031c5baaecc78e51ef061ec9f0f4ee This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nokire-zenitsu1 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4ea2ce0aa0e345e521dbcef9047d946bfbb930294f8f3cb08ebe4bb620637d93 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in bitha-62 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5f74ea61f3200837c8f730538c7d40225984701cb8e0561f44e48e4dfe2b30e4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...