MAL-2026-13049 Malicious code in boxy-get-retry-url (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2bd36db17d5636ee0cd74be0ca5d35fc190e75749360c297ecd52821d74ab8b8 On require, index.js delegates to helpers.js which selects a platform-specific asset path, downloads an opaque binary over HTTPS from obfuscated...

MAL-2025-187782 Malicious code in library-supernova-eigenstate-juno (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 600d73bcef76b7b349db81780081a9226a31fc649ff7b35e1e117a44abc7bc85 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-96085 Malicious code in protestant_whale_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c6fcfca89662fcf419d3800c7e84e311530bb7f6968e6a9872719a25f7cbdc18 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-61970 Malicious code in bambang-bakwan21-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c82e69125ef52b0400907aab06f9a1d9e4dee823d1b314c7a8ccbe1e80312f38 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...