MAL-2025-175039 Malicious code in kaka-poke12 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f692a2ba0d086783925198c3057ec2a1173b82f423834201d3b559d9564d93cf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in astrovoyager (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6c5ada4af20779d70803f2ac0185718d6e9ad53f8a2b3c519ea542c5e7ce31fc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sparkling_warbler-silentdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fa4faa781c8e89615343ef184a91a40d10c998aff9b31d2d97e347d598b22a54 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in eko-kue44-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 61922eb9a16ad6ba5c134ffd42450ee32686c821e136a15bb61a3efd8fa5bf48 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...