MAL-2025-190328 Malicious code in winston-adonis-dotenv-parse-variables-dagda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f796a64813b30c1c12b1198d74b70b219329a69f9abb0697a70bb9cde818dc7d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-80013 Malicious code in military_stingray_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c42c5aa4c4a03f52541238a7b7c274ba4b1f888b49e281f3d67149ec32b7e4c2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69734 Malicious code in optimistic-cyan-grasshopper (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 337c04fca762a8467ad90d660a8de36858da1694d0e2f4c3ab139d99891f25b7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...