MAL-2025-140901 Malicious code in command-eris-telesto-meteor (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 666ea0249d126b4ef46d2141a771c393d1ff2c7876db21ce8aa957302f0de3a6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-134943 Malicious code in kurnia-keripik85-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7f2be264f506e2771e28ba061d0de9ce2b7f196557ee78b23a50611cda90ebbd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mammoth_gerbil_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector efd8c944d67b26c65ba6cbf6483fdc47c8ed8189ca9d3e4a084fd1922dacdc17 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in xenophobic_moose_replicate_automation (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 83e4529565f3ca3b7f3d2d34c11b533a570cc92d022a8ababdc04ca8316de063 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...