MAL-2025-149535 Malicious code in winston-yaml-webdriver-mocha-repository (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0f2aafd2c598a36174246ed2a93655569ec5e247c8ea65d7573cc259e57155be This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-108637 Malicious code in short_opossum_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c67dcb980bc26094f990c5ede536d328e0ccc18aa96a5d699871e8f857905ed9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-83992 Malicious code in cindy-dradag91-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 34c55d29593552267f8e1f55df5457af8fa75a7dd39c608dafbb7c5be64fc7c5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-76662 Malicious code in able_cheetah_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6cdeac51725f97e2bb91434b3ce6e88b2008d69233600d8db52603158bf36887 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...