MAL-2025-150235 Malicious code in @mipta1/sfa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2f9015dd145c0e5984e60d45838f54a03ed61750e4279cc89b91df76900c834c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-169588 Malicious code in uarfug-miu-suf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1daee1354e93f93cabea11a385950fceab8155d4d06d2327326d54bbb3dd522a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-133268 Malicious code in exotic_donkey_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ac672e488b7d6e6e8fd4d376941a0ea58d7b6c5020a4b4d2c3f8ce462c9513c7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...