MAL-2025-188578 Malicious code in passport-nightwatch-sedna-karma (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 590d2c8ef0713d21221fbae7ee5e08dbd5bc8bb6d9956061ea4aba71ab61dc4e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in auriga-dotenv-draco-rollup-plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3b9b2da508ce5e3cd0f2e4e939e92d8107d8b398972b460a825cdeabd47542ed This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-60633 Malicious code in icy_orca_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 26d7b07f7af2426cee46e457ddd63f4c2ca0a6a957b657b101e41ec2d323238c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...