MAL-2025-110353 Malicious code in various_felidae_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 192db8248b5bd7ab85aa1d49fdd41e25e957a3e159235072e672ccddd0e542b4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tpstrpeplgtb (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx fd90f892727d0f1648c10f09ca93b40cfbcf0a6c5bf9cfc4473a497b3a509e07 EsqueleSquad group published nearly 6000 malicious PyPi and NPM packages, executing spyware and information-stealing malware...