MAL-2025-149938 Malicious code in @mipta1/asarar (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8b0a963a4e6504bb71e5b53a299d38f4db61abb00134575ea384977e5ae8dce2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-118835 Malicious code in bambang-mendut89-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d5c9fc28d0effef9304fe401964749eb8a86da0e9dae478a27c694c83168ec89 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...