MAL-2025-107986 Malicious code in retail_lark_dumbs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f778fc96ea8f89ecd842c0da846d74403d6a77e3476be21a70de35595681add8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-81927 Malicious code in uncertain_caterpillar_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3e06746cc6a32a3a585101698f1d35cf86750653e432675078d7affed963e8f1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in willowy-tomato-mink (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f0bb06bb54e19101d21d06f89b5b4e447484f3a74c39ef7c11ce6033ca1caaf2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...