MAL-2025-178626 Malicious code in savion-goodmin-max (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c87d0511595b244c6c2f9aa2f1e8a8b0d14ec6cc8df2d6646428d42f2cce45a9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-177743 Malicious code in polymer-aghhgiha-aahai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 250b112f596a5bb079c19ae7cac9440b822b521992a9305dc16ffadda989c913 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-179239 Malicious code in tray-uozp-paasran (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 12f20258463a42ccb26bd224a97b9a6e69968e0e543fe4fce6ed0f7bec5c7258 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-174620 Malicious code in hitachi-poke104 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2d56ea2564e895cc8bb966113b086b57df39d52d897b2457fad5cc3217308453 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-179082 Malicious code in thambi-resdt-sdsa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8dd5f1c9d3694ba4788db538f942b317903dd8d6fd7956d9a04e3e0961998189 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-176713 Malicious code in nuilva-bavia-munvidzac (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0ed78a404587188520b833cbbf1a2464147db9f10e37f25b777d186d1bd9cffb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in poglymer-ogaih-gaac (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 86296838bd66a8bc2312e8ecf00a1ab1206484e370efc551d7ca7daca3eea138 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-173253 Malicious code in buis-sunia-nf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fe9b7814005b9722f4a52efa22f8e6a7f92053c066faa6b7adc9468e50b3feee This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in zaskia-poke2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 546595a318228c8cdcd08a893f6ff0b827c710891520dfa99cdb1d0f0955f0ac This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in namada-kangasa0-nuvy (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b0e7f59110a32b70b21b687d7aa9108fe29397abc4566e4ea4a494e6ef2bdef7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in riya-33 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4088aa58e37aba819a33b0e86537e9ac673f4851dfdaa740372a403bbc4e15c2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kuku-poke16 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3e2153ceb5c23e0e5d345e3fde37f07d1c5e16de1341be33fedd60250483b831 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in butry-muio-tuio (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6dfecaecea0ccefd6bcae85a54cf04053ed572c781c0e033dc2e04f6a314d383 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in polymer-aia-iaf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aa0b7fdd8e55305d855f5228eaa946372e9c9c7f7a90e62712f6bd429378b805 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in polymer-buyaa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6b54e2c5335d28ff873ef64194f8795881d4d3e268bb9a6bb97a8c04b22021da This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in koko-poke22 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 596df8167e09a8fa7f6c81f63e65b4d1686b8d39479f4b6b638914347d63754f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kapvino-saufdaagfi-ugha (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3ec2589d688b87037fbbeb4c3ebe4ffc2a37a67e6919324ba15c357a17f6a8af This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in anidata-hadits-refifa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 73acfb0801348c8900e83f19cc98ffbe6e96d50482b4cf5ac981696c735bb62f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in manyeraru-nutar-munst (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 746b767a262c446094c126ca7a76e058514edb46b9a16332b36a04de94663dad This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-177236 Malicious code in poglymer-ogaih-aifga (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 533f1da8d9f6663f076df939dc4e0e36365fb49137f153f696cf3e566849d0f5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...