MAL-2025-68949 Malicious code in intensive-red-vicuna (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6d1c7124029bb86dff596bfaf77c9a7161e5bba66c80d666ecedb6ee4b8d516b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71613 Malicious code in wonderful-amber-yak (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 35801713847ad0db824e716b8ed1d7aa967f502740ba840824ff300da8247927 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-65761 Malicious code in umi-kue35-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector de621d60d98213d90c3190886f21e916031ca0f88d1c04a8035ff24ea69c0fb6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-61287 Malicious code in silly_asp_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector acff558db8c8b049fc844e0c44e806f53af7cd82bc64d9a6ec866ecf77c54b5e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...