Malicious code in adonis-sass-loader-eslint-config-convict (npm)

Source: amazon-inspector 1227693d8b17d578c1c34349d603a818d74e794f02ca8a1c07433517135530db This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

Malicious code in spica-magellan-css-loader-eslint (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0d8f507c0238aa2b70a6d45190da561364316f170d18e907d2595af4d14721e5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139217 Malicious code in adonis-sass-loader-eslint-config-convict (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1227693d8b17d578c1c34349d603a818d74e794f02ca8a1c07433517135530db This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...