MAL-2025-152729 Malicious code in arif-poke22 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ffecac563896e81d8eabf809aab1c54fb1f4cda0e7efab75d4aec284581ecef0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148661 Malicious code in thuban-postgres-sails-phoenix (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b7f7468dd28a43df758284eed823c6994c99de69405aaccd16f7ec88096ee61a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in putri-lontong86-wekto (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4f64bc5b7e051f6f150b5e0c1e46e6174a4f8fd56a8b3024a1c17fa9c6f85e22 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...