MAL-2025-163728 Malicious code in nudela-afif-gafai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4dd02ae622dd3c7c1c110ffa7683444a08ee759876579f127162dc2c572f4472 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in slow_cattle_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7ee56ac729d192f8d5b74bff4fa6e7c7510a33a207fa8c14d4fcaefe9319946f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-101139 Malicious code in cuddly_roadrunner_dumbs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4d48e45c5d73ef11388a4922089fde6e3eb457b1ddec4e28aabdcd2072966caa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...