Malicious code in only-tomato-slug (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bc87ed6f0f3019f6c23d86db67be6d7b912477d56ea8b23667d8c250f6efe692 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-123808 Malicious code in umi-kue89-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1de10bc5fdc611bf2396b2bbcfceb95e93d541c3ff8b3b2ded0e920775b8bd82 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...