MAL-2025-177747 Malicious code in polymer-agiaga-afafafyag (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 295afd1a492b54a4a3262a8f646b4d5190c524c707133cc666318929841494a0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in eleventy-mdx-cressida-sedna (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d7f74c97d401a134f9b646a3669fbb031a73c2e27575285bfc7e10c686d79f91 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in iwan-ragi51-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d93f30e3d4cb86380dfc278cd45ef02aa73120172e20a064bcdf3dd46295fac4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-108034 Malicious code in riana-nasicampur65-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 604eeba7992157d005d3baab653ec074d0d726ca14478fe9946cea09f92a26c6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in violent_earwig_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 36baae6d5b4baee05e11bb9b60995bf62ef481fac0fa327e2b11b10e3cca7e79 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-87163 Malicious code in joko-sambel61-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f347e27de8d7bbd4e802862abf983b13158233a59548e80590ab1380ba658b84 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-79984 Malicious code in maya-ruwet93-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector be22f07825a8ebd1a88c74740cd04cc0a5f4e9e199a831d1ddcfdfb10319ba86 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...