Malicious code in @guangnao/agent-proxy (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8da2cb00fa6d2b5a0e5f4a4bdca8ca0cfaedf7e583b0f9e9f54274bcf5c39e06 On invocation of agent-proxy start, the CLI opens an outbound WebSocket to an obfuscated author-controlled endpoint hub.client-llm.com, reconstructed...

MAL-2025-64033 Malicious code in lina-mangut27-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c46380f08dcdcaf5d741bc58ae888373e649722910a670e4e52a7e86786c07ba This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...