MAL-2025-164762 Malicious code in rinto-poke109 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2a5769e8c3629454a792ac66d6f396ef3909e71711bb90dc0ab101949b6c04d8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in janus-nightwatch-library-antd (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cccaae8db8792428dc7440f4cee2f05316ffa925f7b96e7cad444831d4ce99e0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140987 Malicious code in commitlint-hercules-slidev-draco (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 991cb04c1194171b78d7f053ebf092f3b9f49e7ed29b12f2f0776aa9e7cc7dfe This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-86191 Malicious code in hadianto-bika66-wekto (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 578a4b5018023257589004afebd03e1ba228e307eeaabce1902f582fdf0ad789 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...