MAL-2025-142904 Malicious code in gemini-mini-css-extract-plugin-style-loader-achernar (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 55dbacc8fc1bfa1a561e8f8fae3f0884f286af2d6425eb54e8131852deba7f28 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mensa-antares-yaml-jasmine (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2158db6a93e45b802d98978535699fb91afd8047a20243a62aaf72204c09e35a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-94102 Malicious code in double_pig_requirement (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6384047d6ebf15cad19bdf2d6e4b300ec7eb37c2baaba063695c3a9a7d99241c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...