MAL-2025-140340 Malicious code in callisto-levels-subscription-dotenv-parse-variables (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3da1da336dd77cd89cb44218e89717c86254a1d963cb305acf62f650a1d7b203 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-103161 Malicious code in gilang-serabi51-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b831681c0b7d7802cb661b4dc12b4591a1699d20439c78bcc5902de8e948073e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...