MAL-2025-147639 Malicious code in sails-concurrently-css-minimizer-webpack-plugin-wasat (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7a4e5cc17b6921b4f1627fafef4b139df5cac2b0f07cd37d26c90b68ab19bdaf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dewanto-gandul57-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b345867861d737e0859bf32b7cdcd1977ddb00041ac3e1670406d9f31c289837 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-89609 Malicious code in putra-sroto91-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e79ba7ec077dad8e615fb9b9e56d4ee7c9cb4895b508394c16eaba23f2876cfa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-74399 Malicious code in maya-kue91-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 48645a606037c82eb03d0cdba8d4d374ecd25d54455a3fe278b3d36bc630d5f9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in toxic_marsupial_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d8db903555d32935a5ef08be1a74ca72d7957e66ce8fee72b2ac4ec32fbc9b88 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...