MAL-2025-187807 Malicious code in lint-less-loader-jekyll-virgo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 94f459bf148cb91c899d7aac0403072e50f2ba7547640fe1ac3cebbc1d9607e8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71267 Malicious code in uneven-chocolate-python (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fc028dac9f7f90ca3ac492a5438af1b502f2c845366c50704aeb8c388a225c58 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-56918 Malicious code in iwan-klentik36-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 726ad7404229b697e36b5187bf9167978699a91b191253d700c2a5c4fdadc778 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dono-ikan56-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e060070662671d20aa31fe775d065abfa57a064f886635bcf6ee3184ff62b214 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...