MAL-2025-183586 Malicious code in lomi-fus-ugaif (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 66a69a4bbffdd5887ba869d2740afeb9844515509a5bd4211ff2e84643332729 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in poliaoz-aiko-avuku (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ec1307a7d3963578d8a1168c6c07013c2ee6f6ee8787db247efaf521f5dce9eb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144139 Malicious code in kaus-cluster-superagent-slidev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e520fa894f85dcf5047f8f11da6df83734d4f0e4807024182938c2148739a349 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-137108 Malicious code in sufficient_canidae_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e39daebce36faacc04a258a56a7bf76082c82a7aa744d3a237f2cb101471d09f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...