MAL-2025-188405 Malicious code in old-export-class-cron-deploy (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5de005af7b5e64e3e82f9ed4604efbf0af837e477e4013fd75f9512922040602 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-178048 Malicious code in polymer-idasiffa-radaf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector accdee34ab69600aa450a65a541b5480a1c674b45ac8972ee76b58f5db4fb634 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in xenon-umbriel-jest-eclipse (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a4789f13d13bfc6480462c74df2249fea0b3264ce877ca27a1707785b3777eac This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-96790 Malicious code in straight_marsupial_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7baefb624ef434c7ae4d1462eaffba6c2cf547243bc2ca9ba2eeb350cc5ce322 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in udin-soto15-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a732d2d8f6f51c514ef9ef7ef76d8badc11f728da1245050d1bcd2befc0b923b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in vointea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 668e6dafaa3d8e84760b5a44bc6d8259c025d631a1f150c4d77fa0e4b02d3d8d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in eka-ragi95-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ab57d830f4bad0208a71b7df98aba2ceba884d6251d1029340b747ed02394c6b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...