MAL-2025-184903 Malicious code in sonic-jos-afigafoa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 40e42b3f408a4059927972a6ccbdb450ea41f696340759b2c8601b0d83466560 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in scornful_finch_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ccd8715f39604a76c3d8f262424ffe102e528db174c837dd6e6c580eb2764629 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70866 Malicious code in straightforward-chocolate-goose (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7fc9c58bcd54d991b1128adbbfa1ff03885b77bd950139998dc0d02e6524ff61 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...