MAL-2025-186792 Malicious code in epsilon-protected-reject-parse-benchmark (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 35e2002f19bc3435a3e86a887d2655568e319690d4a9b1e37aedef4be186df3c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dewi-sego25-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5250047b3856b0da63aa8dd9e2db91db4106df9c11ee0fea2f8273eae0dffb18 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-84498 Malicious code in dewi-kripik85-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8d297f614b3f3d48d004d0c194242dc15a1caa8cf68a568395ddf18b81797225 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in putra-menjes2-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d7ca51471a45bad65972caa2b3ab5b3f85e55a01567c3257549b4258c359f9ae This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...