MAL-2025-169678 Malicious code in ucok-poke56 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4e9bf726661676446a6e618b63e16b90c236aadf50b738de022fc37841453672 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148260 Malicious code in standard-style-loader-flare-celeste (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6f9ab2321a1d8bba1e68a004f01d1aa6a51d88faeedf9b2d448f214e64125d8c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-85687 Malicious code in formidable_swordtail_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector caeae8e1e62cc2c9ed23b87db7ef511458856c97768a8971975aba4d3f649633 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hanafi-tiwul94-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a3c6a0d2d8ea46360b6025e7f27af42acd2cbe32da3400873f02d9c15b8a36a5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...