MAL-2025-140161 Malicious code in buffer-materialize-config-subscription (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 18db55707488097b21f274ec5371d25d8c58b91c6586082978d0fb1407c73349 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in neptune-blaze-quantum-dotenv (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector efb360ff687b26292e07146d452935db0438fa45682807cd664889d6edfda878 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-74174 Malicious code in lisa-kemplang98-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bd9942538544cd31dd8f80ef05f83422243c8a0b47a925b646ff2da7cb4b441a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...