MAL-2025-177420 Malicious code in poglymer-ogmimh-vgpag (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 18cbe4620f65cbe6f1e405bb8bfd550b3f226ae84551bfa3dc0342bf32dcf291 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mulyono-soto34-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1a4ca78b7cab75b5ce9023a536a2fae5476ac64e24d9b26bee3dc6fdb1cb4212 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in plain-amber-horse (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b871cf67ec2c5bc45b9d63602092fbdf443082c0888bddc31a40dd23c3272527 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...