MAL-2025-187318 Malicious code in helios-jekyll-polaris-soap (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 185b2314d9675d6e627b2ef3b7251acbba2ffb5ecf02743553126f3e6cd7e1b2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nokire-arjuna36 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6b5147820e709047aaaab12812bae948197bf55865d70c292fe55e9e78867f59 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sunderlan-uyud-vamuanmuanin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 326afedae9cbb3acc9b828f616183216e859e46b76a4f4bef2e4a7ad95910a99 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in goodmanmax9250-example-forest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3481c8212d784b52ea6feccd740e21f8d630b446f33088b8fe6d96f0bb450b97 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fitri-gepuk34-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c318373db7c9bdbf60f567eb1967a33cfc3d1152b3d8d7cdcd4e05291b7511cf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in confused_ermine_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b801856e8ffff842e3b8aa44050ef3756ad287a9c7ee17209a67aaf0bc5e5e95 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-122863 Malicious code in revolutionary_sole_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a44b1febdade168b0b89720d15eccff9b684c96f077f64c8ce328b84359dd39b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in civil_salmon_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3cf4c03d3c577d410e8c204876ea7fad2ff2ec76c53c23c44f1b523548998a20 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in symbolic_mollusk_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector df7278637f31bf1b0c891f3d85354e73678def8da754105ae1dbefd18d573fcf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in courageous-apricot-octopus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1877c3ef53abc5b6b70d8e607f49641416a3cfb11cf398b1b802e8eba78f2024 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69048 Malicious code in kind-beige-chimpanzee (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fed8c6ea8ee89b123c3cc37f8cc867f590cd2faecc593e870a802a369b78d241 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-62867 Malicious code in fadhil-jengkol14-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 494a0278bbf1393bac7d60a904a190c353e87961f074076ae79792ab904d5446 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...