MAL-2025-187382 Malicious code in hugo-build-configstore-rollup-plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c9153c124f5d5e6316c12ad12d229ee3d86fb12c8b46821aa50e1b4c2d6c78a2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-87868 Malicious code in lina-teh50-crottsekebon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d0533c86e3a1ae349dd72f4ff776c0064bd002a2f5cd4f496c2d191492b1465e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...