MAL-2025-188331 Malicious code in nodemon-css-loader-husky-parcel (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ef0c6f6980a8e239fba86b499d7e58efed539940a9b4a001da5150da2f24d7b7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hitachi-poke63 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8836ff91b7a12090c7aff974df1a9e1781fd659930a1c1b2e602420607e9a5eb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in complex_puma_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 61fe27d1256932107a575f2d22f0d92c6e1dda5689901eee569a32ef66c629ea This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nana-kolak8-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e7178aca579de21e9d9299bd2ffa3d3cb663cce33dff9fc86a3c913000dd5949 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-113717 Malicious code in erwin-lutis45-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ae38299d5cf829932069b6cedcd94909d23d3dbef71688f2208d44f26936df3f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in legal_camel_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 690f7309495db167aef0c789e9a75925827ef4cf064d359517d0757c766874ab This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-76806 Malicious code in ancient_bobolink_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7606e3bc8ef627bb8624b1c45824762cdb5c96ec2ea3143267afd2fb07c25e64 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tomi-mendut3-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector be0fc1da2073ae3f775d0957354debaf3c224aa9c07245143fa5e6384295be11 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...