MAL-2025-157871 Malicious code in kupa-lulio-igugfu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c6f142b4a15df525a746716138523a82e314d788390760cc4c72941bb4b87beb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-160782 Malicious code in muda-poke46 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2a4930cfcd3be03fe690eb86ec8b6ee2dda299aef215f0797954b51a7f15be13 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-120135 Malicious code in formidable_warbler_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7c1150c9f580f11ee0132394bf077cb228100636e6710774de3c7c2b965a7d1f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-66014 Malicious code in vina-rangi78-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5dd6a0367bc325c9d8e4ccef72206e5f76c311a9b1e38c0515325f7740fe09aa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...