MAL-2025-189771 Malicious code in superposition-brane-gravity-altair (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6d9c82c048bb292bb73d9d46a6684296f3b4daf92daf54aa70d1879d885c4731 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-151122 Malicious code in abeh-poke25 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c879be3a43c608e1bda997c9255ea5cd18ab018edebe1867e61f407d568dd4d4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ogi-semur49-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 06ee1abf4e622deba6a6181dc66d1486dcf9508e7f852abe6d86ae063dbfa7a0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...