MAL-2025-136835 Malicious code in sari-kepok64-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9cffbdae579050de8da4e6c31d207fa514f5ae4cb742078be485476cb1d47381 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ashamed-jade-guppy (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cdc688265c91e65dd89a99b92e92216b0de372d9fb598c72bca5630ad748a61f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67759 Malicious code in digital-tomato-cockroach (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c9cade79f2bd5147bf2c7aa7a05bda071f71885a3856c860c6e26e09293447e8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...