MAL-2025-102143 Malicious code in envious_vulture-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1a879aa1065a4a8b4a9fa31e261c67dde9d73680d49d4b0a9c63b2e87e59085c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-108977 Malicious code in spatial_jellyfish_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 73181495ac6485bf5a524aa291963d1bc43dcbf9a7aaccd004c01507ff8d66a7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in applicable-azure-stoat (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 612dd78c4e565ba3b918adb5844d7603f4315e178cef5f85797a5b010e134d06 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...