MAL-2025-156615 Malicious code in inufgi-goai-januga (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 981c62507b434a172479098dd037055aed4318f23c6b1585be31553c62e94c9e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139954 Malicious code in bellatrix-protractor-fomalhaut-css-loader (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6f4aa076d16605f852f34a40ab150b55bcd62c3c8df33c8f1fa61916e50f8113 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in unsightly_bee_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ee02dc972738c0bbfa976463455296cf63ecc477f4bc0ce65b7c82774ab3b473 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-85456 Malicious code in fajar-sambel44-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4a78675fa150936590644e4e34ef0d8263a43134cf15f5be02adcee29076e7f7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...