MAL-2025-146653 Malicious code in promise-uglify-js-chalk-sagitta (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d217294d5c2c2e64d732a8ea1fc726b9a504ae3f6a023ec18b1f4fe46edc6187 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ocha-oblok56-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ee47bdab2853fe35f6716ffb4a680f5ae7779b3eaccd70d6bf5690204d002d70 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-81534 Malicious code in surya-mangut43-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 26ba9071707d6579f98a7986f0b0f8d92b5e66b7ea697079cb58ff79d7b44d06 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...