MAL-2025-186864 Malicious code in europa-alphard-docusaurus-io (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector abfd12c80aa354e4a81290deca797d5a0670d28e73a14c4d60a450ca24efb9d7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in secret_alpaca_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ebf1170e6a82c6669653aefc04de05dc9336ffc061cf8a3f53d0e948d7c01fc5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in technological-indigo-ostrich (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9f7774fa1b7e5fc023a88be7bd0d1899731f3661ef466cded25ab8d6b1ba1a60 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cindy-kue91-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9797cd4c8c0d73e7bf7da9d47859d20b65eca0b87641227a78b9826c2dda3ed3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...