MAL-2025-177831 Malicious code in polymer-avoafifa-fa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 14cc75b3cca1381fc0a0dc7f978e8363534f399779695fecf6f4095c3537a2b8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in diva-banib-imili (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 801d0332aad7a525c05d1a40e6782d0a99ae234c8342df1fa8a3724b158d00f2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-160506 Malicious code in miracle-dok-uai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2b0a3b59cfe477b7442f59638f6561be8825a421a181a4af7995572c9ad00ba0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-166560 Malicious code in syahlan-poke59 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c90a33716a91eb200d0c133b00896bb2ceba611cac5a2acd0f07620fe67d5a6b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...