MAL-2025-186651 Malicious code in duplex-version-polaris-cosmos (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 473d20a9e34bd0d8b61bff859c9548289744b91ff9d50156cf77a4aeff126ada This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-177181 Malicious code in nuyar-mar-af (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6e533e4a39d29ce12cb72789d012e5bc3b1924ccef8277aad8b771a6cb5cb1c1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in wulan-36 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 824d99b828ae275d75ea74acde2a97f34c6966c205cec9279f0ef591ad5abdec This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in neptune-eridanus-jabbah-wolf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector daf8e91c6a667fe241fd67d4152b461ba2a0c007607acea3a94c86dcbddc4247 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in preferred_rhinoceros-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 50ac6ecb4d6e49713bfa58cbac5c05627199152c28b0667059d1299a6065df30 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-100185 Malicious code in bumpy_coral_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f6e674097a56199cae0199b578eccb1b37a9c9ca11e485ddc090ae7f2df6389c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-100417 Malicious code in cici-empal92-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ec4676f3ce8c3eb8f5122f951b397ea6e63be46cf40c7b25d6a96ba8b8e3068b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ogi-sambalado92-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9e3a27cf25218101b70b62b406287bf04bf50a13d19d3b26f53140b1e38a5f78 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71549 Malicious code in well-salmon-tortoise (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 87f852fe0c7b047e54f22549ea6098cd0598526485f61f59b6416a04c079f9f0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in smart_orangutan_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 020791797274c140ea28f2ea15f282d56c325be2493d461efa5daeba16066819 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in putra-donat2-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1a2bf761c738bfe274e640b11e895b2fbb348ea5e096d8bbfb08976ec805bdbb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...