Malicious code in capable_thrush-smiletea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4c95a25651ac4b632c63e2daa34fd8cbe332adc5bd887c9fbf640a30f1e6e26d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-92878 Malicious code in zaki-lapis60-kyuki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c6c4c9947ae3520f04d04f4270bd4d2c9630dca55310161ae486b39a76423226 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in wawan-teh65-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c9408b58cc219a4e6fcf8c3f9bbc514ddf1f93c9d509357312090b3d3eff7323 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...