MAL-2025-147618 Malicious code in sagitta-sirius-express-async (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f087754848ecd4b5049a7ae0f8fba20fb2b743ebb27991b80416ff6cea727a76 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-136368 Malicious code in putri-donat50-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 474e143f1190fb895784ee39989463f8663e25230de5a97c28ae4b158e5b9ec7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in irma-jus96-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e4d4f811c59c54e97c5e12453d47ab7406be0cabe8c2e4e621b6c87d4e787f0c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...