MAL-2025-178449 Malicious code in sahu-satmug-faf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1c0832d0f6d807f52c254960f31f563868df4c0d96d9b5e79391e4a2a90bfd1b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-177922 Malicious code in polymer-datdfsadsid-ragadadr (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4889cfbf6bd04ddbd78d03762f8fc2bec457772771d4231a8cb49c2ad0dde41e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-174729 Malicious code in hitachi-poke86 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bd2a451da6cdd3c2a38f053a6eb9f18b482508816bc802e41c8f9c4f785952d2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-174312 Malicious code in goodaan-nusafa-nfia (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2bc22ef6a9b1f09104c88148bbfd94868be184060e7ff36097b2d6db2c48c195 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in thambi-refg-trus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0950caba705348d437eccd33f5974de78144884852dc5502d405fdd2b293c425 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in divata-tugai-imifua (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4ca887ca7077a210176a260bf5e04e7eef9fff487b32365fc51973e82ddca473 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nuilva-bavia-icav (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c381652f53c82f8623c38eb74bc8aef5b44f81aba1ae89e31614ca04bac4f211 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nokire-nakao44 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f4fed384f1319838c815d9ff0bb0dae22baccf9c31121d49b3141358a8e0ec7a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in polymer-agashgiha-agahai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7c1502927f7c751c85324ef28db3d34d6f71b0e54dc230c055fd8b8f491c2f51 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hitachi-poke5 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7d60d852b51b5d3a82a2ea23ee1b5cf769844cec364de40678ec6d02be770ffc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in diva-tugafai-imagiuvaga (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 08c270a1163d353292c9263d5aebed678f46c86d9c6fa8bcffd54c091b116fb7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in buta-fippnoa-inaufa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 77936093212ae90353284e914fc51570d4c688c27a7fd3b887d4b3d53b110c23 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mufabafgi-sufuafi-cagasufai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 690cfd867614b493377d3cbd23de8a8795379107d472dbd56a71a47ee6a386c5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-175212 Malicious code in kapvino-socovni-famabavpvcavnvai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5ce5beabf2fd622f14f01e01caae8f8c1bec2e34f0c1537b212da5bf4bf99596 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-173476 Malicious code in buta-fna-nafifafa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fb4812f894a506ba710c60bcf403b2c2bd543dc9298ad4a3aefa800a8ea7467c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-178319 Malicious code in riya-38 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aeb9852bfe582a1f407040f3c2a668d59253891e7562040f72327916abda1a4b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-175953 Malicious code in mahniya-suatayu-ganoao (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d34119905957fc0116567c47ff6aae9d27b34b84760afd803d65c47beb5cbd6f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-177994 Malicious code in polymer-gigab-agaigada (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3ecaf26d9feb58db9e3cd80a8a99ea143f905fab82ecb7330c442f03ed8400c3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-179052 Malicious code in thambi-bytss-yuhgd (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b76736c2738f35dcbdebdb081268bce53e9421575f6e83e68346e4cdf4eb6f28 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-178113 Malicious code in polymer-tresd-dftrue (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b96126b9a5ab79d8a4e430361db84811f51119e5fbf7ae9611eaa94f48c83426 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...