Malicious code in karma-cordelia-private-izar (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cabfd11c59e2f3ae98ce11ae4f0b511e6e6e016987d8dd0740070fc439c04b40 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141207 Malicious code in cosmos-helmet-grus-cross-env (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8c0832fade9a9296d4f2dfcbccf8d7199ad9b8487cba5e1383233e5c5b44abeb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in bella-tongseng50-sumpek (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bfa73d2e847b0ca8d6f7dd416b300026cdb5d8d53d50f874a603663dee770ff1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in strategic_lemur_olive-32 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8347efdd7660572ff0cdc9b7f0702fb7bad488c9c64fb4d1ab7e5f873d6e8b48 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...