MAL-2025-142204 Malicious code in eslint-config-pegasus-nebula-hydra (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 74680d60c8785d4c5bbf23d3697678ac626220a25c6896b4e64bbb7e125af006 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-79192 Malicious code in joko-kemplang60-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a25bbf75a4a584cd9ee4b95e84ec025e021d246d9bafa180a74fcfc3a70b2c47 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70820 Malicious code in stale-tomato-snail (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 90af5a4395a55228f60b49a519f5cc020a7bb94cc3e7f0e16c90c99f0ceed93d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...