MAL-2025-140589 Malicious code in chai-firebase-koa-wezen (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 58c3684afb31f84cfdeb0ce06a2cd60169e7022b8dada7fd26542b56b9544dad This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in vera-lontong23-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e5ea1cd0178fa4bf0594c9cddb903598c05be284360146f3b1ef3b57eb0f6616 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in udin-kue34-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c9c0701341591ce3c23a4a3e040466dfadcf4847b14452f93c8d9e9b95afb3e4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...