MAL-2025-177955 Malicious code in polymer-gfhgai-aga (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8f82b0c042a661f9c2fb7fd7ad22b496b3ad5249702fa16c41e678b6a80a13ca This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-168270 Malicious code in tealove-darknest15 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fb6974a0529ea89f3f8601a2d9808e78d4acec0308b7731b4c38baf058f2dd2a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in neat_platypus_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bf27646aa514fa0365c589df5c8f1a10268f215dea138bfed3b38ff6aebef55a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mahesa-telurtahu96-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d15cd6367302777f94cc05b589091321876f82f1264b1052cb7d4ab2f6717f99 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in teenage_crane_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 82e3e649d8456df58cd5a634ba158502ed3ffff103e9e8158c16a0b7ae6d9b89 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-88769 Malicious code in nervous_pelican_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector eb87889b40115c097be8d22b2e38dcc37c84c66bfcbb837dea4067339456046b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-60855 Malicious code in mild_magpie_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 082fde5eea7cea7279678d1050364a333a8641fdaa12e6d715b8328b97cdd08b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...