MAL-2025-175827 Malicious code in kupaio-ulokia-jakaofoai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d6c3c25cb5c21464fabc8f37a4a86539d08be8ad7562ea1ef938c7693b8ff0f8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-177834 Malicious code in polymer-avoafifa-fagga (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8134ea32b1ef1075e16e87cfbb292992a45d6a86257fbb8913ba5ff92d4033c9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in poglymer-ogihh-asfa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a1534d7c89354121c04f1cc3dc84911ffd2fe6e046cd1783e61bf0826700f4cb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in polymer-afhfia-gaifgaf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2a8ab4aec6b6fb82f907eb53ffdfbf5add6d4c1875ccb94cae0410c39340b59c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nuyar-adaraudi-buya (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4e672a7d4e9a1f3b6242830c0825ef4a55542d3072aaf94e9335411daa103aea This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kapvino-soni-favri (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2c7d083549be6eb45b4c45e510ab1af4dad1a61a587e762dcad23d9b01f58347 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in polymera-anasiraia (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 43a1f443e347dc6e9561568198c2d77138684c3c101f8881d625229763f9cc3c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in poglymer-ogmimh-amamoffaoja (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bbbf8a9fc352cec2a178a8f1d9295590f0daaa56e12171342f80b0fd4e57cd6c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in polymera-anasirai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 42cabe88e35283b06cbc22b52b55063803270eacf2d01efbb57d0e0b70f11ed3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in poglymer-ognmh-afai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bc9471edc28d52c15f0ec9003fd2d6c49522f3ee445c66b644b7cdba7be0856b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ksai-kaisom-olakiaoalio (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e65b92eda5a329ad86f64ab3048317ecf130aca9000c2dfaf407e7c67349ff0b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sgoodaini-nugusa-utufa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 591648a8f88555f620b76e8825f61d642d4c8f4f830b03afe94ae025d172493a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nokire-kushina48 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bf87147f90365c63254a84b887d857cf1f9079a6716c1c2a9a7a7e248b1e39cd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in polymer-gibfaa-agagaada (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 40916d7578cc584460566433108018b41d3eed5abd835aeffef8a976170e959e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in polymer-adag-sjddi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ab771be4a6319658652ed729c5434b8702c9fe3870e84600dbd4c3582dcfa0e8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in godi-tufufaa-inutya (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a11e8a258d182b3a82172ccf63b2d263d7e4406a33341425c4b4160f3e306e60 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in polymera-anasrai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8c9ce1c31490f00591b91ed6c8f95c1f31ba417cc45ffb1157baefd5edd187bf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in buta-f0bobuna-giodaiaif (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7155871d768eff20f37e868a770c8e43658bbcaed5545f33810825fab95b5f91 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nerfaa-ndutar-munst (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8d3d01a3fa7cde71a2614a5e34db4d301f18089ed01d10aa50309cd038ae1377 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in polymer-adag-aggisihai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6dab6f15f304847b4a177aeaa0e9b584bed322476e3b2b472a82e3cab5b4bc5e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...