MAL-2025-187540 Malicious code in iota-less-loader-commitlint-config-angular-private (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fc9a2cc8ab09085bacdd14c9dfdd31ec3738bd42d232c1c5a7b3a72c15ab2016 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-136661 Malicious code in rifqi-ragi66-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 478e8752b11046b3ccfb32cb95bb3fa869a247d09ade199cbe2e85d69a8e1438 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in very_swordtail_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5ee416139a7079232c79296bbbe80776c9f3be587d31a45a523270208b08f62d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...