MAL-2025-177888 Malicious code in polymer-avonnf-abofafia (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9bc2200a20e4598d8fcceb33933b80a3a12d7d701f87caa34d8dd9edcdf6279c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-174902 Malicious code in indah-poke13 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector de3b2c02dd12acffef2f0a7b219a806475ee0a07d1cec4aad6c3b8976239456e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-177620 Malicious code in polymer-afahof-rafgago (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e85305c10dedcdbfa3d371cc14194f2e124a3ad06b5bf9f46101246f313314b6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-175172 Malicious code in kapvino-soafsi-vaidas (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ad90022b1be8f667556b1757abfe73ca0a3412dc2eb5f2e0207ab8637283c66c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-177564 Malicious code in polymer-aavof-afafavbagdao (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector de86499c0ea4160250278b8b670c1af57fbebcac32efca38387e50688a506330 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-173461 Malicious code in buta-fiuaoofoana-infa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2c0588c23773c9c2ab794ceb916ce2410be2acf7a9b7079d9de961b499328bc6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nutravaa-nutafrd-nddfuadtr (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 240225665644a32b73b9612a7616fa1577d6b46d125962efc55a8ea193b0165c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in goodafin-nui-ntyagi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 652540063b0bce32898fc4134dd84e9067fa2ca4d36571d6c7e412209745206e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lia-32 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 93f1e71776fd55c4bac5f649bdc4e122a2df5f6d209e1bf99f807b781ec7c732 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mahiu-sautu-gafi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector adf177c882841f4892fcd87fce7b1a0c5d4771a6a27319d0d356c8a45d9240df This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hitachi-poke31 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8541ca64fadf5d79d2d273b3e346a4cb6f4c9a8089b07eef83c6fda07a441033 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in polymer-afahof-rafgabavgbo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a8dae1bfd25a1d56d7391963523c05fdc323e8cab152b6832e16c096c58515ff This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kapio-samunu-maivvma (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 74e8e52a597f527f7af25605eaa0c817c90a9f812038fc9512f3f57ae937fd3a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in buis-suninana-maduo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 95ac47989f30b9af2158c06172d9c83f97bb36595040f09eb301e7aa8e2a02ad This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nuyar-adaraa-bya (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 914a26da737b1757a35243640927b5a74554f25a8864f9b61cc2aff6eb3fa75f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in buta-fs0boiuna-gaaif (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3c4797eb0a1a773c2bd83c6983b456430beee67a29b775bd847d415cd523f434 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nuilva-daarde-fagafiafogf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e82b7b2a1a8e1277d9e1c511cb6b627c36367683228c82839ca71e7935a0d029 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in riya-36 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fd1cd7b622e53299618726bbb7711e4f062036006ec0f60a42aad6cefc6fed04 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hokage-20 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4bb39ab6b851f7f2030acacd57b16abfe0fae4032eda97d7affa9e93b2437077 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in goodafin-nuiyag-giftu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d2dae9cf934f1352257a06a752dbfb8a0e326b5eb2c45bdcdcab4f310e07012a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...