MAL-2025-177558 Malicious code in polymer-aavof-aafdao (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 493995f58ac19cd2ef433204ed6156db33583b3cd9d345edf1e33c51f924d45f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-179029 Malicious code in tersui-patrip-miti (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 17015edee0ed4d6cabe6d01e4f074d33e7d9558120a300e349e46b65644577d9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-166338 Malicious code in sunden-dik-vam (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 57e8545149de8189bbe47820357501eaf5e0c33769b58a77a45dc94f3516bade This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-161103 Malicious code in mutaus-mansis-saintrasse (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1d0209d4be26ceffd1af95e05bddd2f061893c51c4b0206b50d9db31718737d7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-134774 Malicious code in keen_bobolink_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 808268e2abaf3ade931fbeb4a60cb6c02c6448411a3f49a4eeb93a4f5cec1c70 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-125729 Malicious code in dewanto-klentik66-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a1dd48e4372d09f7da356656b7e8212c32423daf70188f3e5b620b596a32bb11 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ogi-getuk79-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 11c518aa1db00816e7e7ff855e25164d91e1250ca767920e7d41880ee124e4c3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-66043 Malicious code in wati-buburayam29-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b79818122136e0547242625bdfd282cc6e32363b8e97e68aecc95c56f488bb6f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...