Malicious code in @angulr/core (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c24dfd4b0a686b9056ff662e6fee53edfe23c7a94a5edf93fb4cace176216518 The npm package @angulr/core masquerades as Angular's @angular/core by cloning its package.json metadata description 'Angular - the core framework',...

MAL-2025-105957 Malicious code in monetary_prawn_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 818c178ce1dc35de898d42082f961308f82feb980678319596c75f4cfa0fbf6f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...