MAL-2025-173390 Malicious code in buta-fbna-nafifgfoafa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c9c608a9f0c4f1350ee0fd930836db6f5eb2d803b7a213270ef403afb46d1576 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in transform-helios-jekyll-spawn (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dc021b0668f909b84b57151c40a8fc0e71fcdfb248bc540f7fffd18a761d5f27 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-92004 Malicious code in wati-empal54-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5a330f71e8d2d5c7b4a12b4cbc65fd4ea19ce2e9fcb63ba260d72272414f05f7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...