MAL-2025-144982 Malicious code in mini-css-extract-plugin-nightwatch-ignite-capella (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cd7abf768c17dcc0e5b07309564f07f447feb5c1795b58c7d519912d70485516 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in umi-sasag14-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4ffbd7b62d90c7887fa210e29f5c9fa107964e24a9929597acb93306d0a40d1d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in bambang-soto22-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 82ebf420ee8091f241b7fe0894d26afcdd46234165e1c665ebf43150e4971e08 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in aggregate_elk_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b1884cd822485ed5047c3fe55d3b38e7df9261484c623ee3d95e9e17830d28b0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in joko-lontong64-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fbae03aeff0cd20b74265ba31261ccef9b54422a89da67dafbe43c1767bacd28 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...