MAL-2025-177505 Malicious code in poglymer-ognbamoah-afivagai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ebe2802a97e8d051168766f76f62476767007ed04ad8e48f8ce71b84e5214d6e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in convict-query-nodejs-prettier (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 947879ab9208e82054fd505807da031763a35a0ff420bdf7e46e98c33eec225d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-127659 Malicious code in jittery_worm_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 11fb4f004db7bdeef7aa4f87ae08285749e84f193e5e441f00aab1e239a8d4cf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-56886 Malicious code in irma-martabak59-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 70393e8837ef7da45dd790b33d4a002ae3bbdf239a12b3bc06bfb73deaae0d16 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...