Malicious code in terser-nestjs-deneb-unuk (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector faed8ceafb424f803065b2bc376f7e367d1e2278d4c405f8cd241aee76e9dac1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149090 Malicious code in vega-gatsby-backend-standard (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1ef9239b9a48a8b8028f1bb79e1822e9bce3d82bdeba0246f6ac3e17e3a88318 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in oktafian-gudeg84-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0499033207b14e6f078fe7e9f84ccdc41e0372a8324928850d65861f83d4e6f1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-99874 Malicious code in beautiful_catshark_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4d9321634b71110480aea3bf2e4dd2fbf6118178d45d7af6d6923c2d1eb99ab3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-80716 Malicious code in putra-lutis46-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f586a8d757fe657c8da6ebcceeb45f27bf9674468c4b650963fc578c1164fc7a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in vulnerable_ocelot_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 886d40ed548d41b1ac47ba7c4cff8b73c7ac90fa09c77e8fb2cf1a7e5e108e91 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...