Malicious code in sagitta-protractor-taurus-csv (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 266c9e23d1090c912eeaf40a4ae1dff191771a30ef3486e1591a591c9ae91aa6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kim-jiwon-mem (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6fcde3759088b77d57f90920cb6f1f816139d5c49f056cc9bb6b3cbbc8b8165e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142993 Malicious code in got-ursa-css-minimizer-webpack-plugin-redis (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5efd654fe96c6a67d87c933eca18ad2b34cf456480a67150d1a51d0b71d116c2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144559 Malicious code in loopback-neptune-draco-concurrently (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 863bf80300eab0764f6d6d3b01b0dce677accede3ce2225fb1ebda3b3224b812 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mahesa-telurtahu96-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d15cd6367302777f94cc05b589091321876f82f1264b1052cb7d4ab2f6717f99 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-54094 Malicious code in oktafian-ubi57-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d22b5ca74005132e1bb0277cf0c796bd8de509aea827287eaa9bb0c5ce81debb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...