MAL-2025-145273 Malicious code in nashira-farout-sass-loader-private (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5c5d9425595d1a523a7abe4f4f6cb677814185a26cbbe69eb2ba49c417075590 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in betelgeuse-scorpius-postcss-loader-telesto (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3427e7143da6bb276367048b0c5b5503a017feeaf6621d126c4520ebf2085c76 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-99390 Malicious code in amazing_bison_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 97842f4ff5d93a7a17199b3884112b7054c240274911d811aac1b3061c527a73 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lina-teh50-crottsekebon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d0533c86e3a1ae349dd72f4ff776c0064bd002a2f5cd4f496c2d191492b1465e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-74296 Malicious code in mahesa-miebogor52-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector eb20a0dd43fce24c1a4337d1793549ce970a5a0e99e44f4e2049dc6e97356116 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in quixotic_woodpecker_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0e80e52ff4793676f441d01a4a1003cf612136ee133eb01ad4c226e3e3957e99 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...