MAL-2025-140410 Malicious code in carina-grus-farout-antd (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3f7c36dd6030a02c4d9da372d362ada5727f66776678117752fc84d9d6c8ae1e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-131626 Malicious code in yucky_cat_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ce21c1958700d94ccdc2df1e151e5fa183658a06f78a0f7aae313232404759ee This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-116304 Malicious code in open_alpaca_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6092370c455169a99a6e0ae8133a420d900b719e73ecc540a2d15695dd4fac2b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in appalling_lion_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 21c37fea43520fb3507ad0cd19bd88f2f9847372eaebaa00a1e192da2c949099 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...