Malicious code in css-loader-metalsmith-rest-tailwindcss (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 005841e6161cc0f0146a62615f6eae5c47197caabf44e0ba61f55a86dabe8a78 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in gilang-nasisayur31-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b8974e5e2ccd56f90206fb1319dc773c9181a3f93b978b318add7736e3f2051c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-136593 Malicious code in riana-miebogor83-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e671bd8ed00947114afdf3f2564f35d6777c8bb580433be03ae795b0d9464b00 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in youthful_unicorn_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 83d0147e5150878fa22fe314c3914b259998b83240da7c8b13e8e55a54740806 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-97033 Malicious code in tory_mosquito_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a139d1fe8f41a2a49d0e0d385330b63896abdf7dd436a862f41f1ae1c23a543a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in wicked_cow_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ba220f260cd7cf8a0a58ddb983e11e7c0b6ed66f08c45521894c57c882e541ae This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in wet_crane_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a7067581be74a739d5f142145c8a99bb4dfdc41c566f83ca1cb5bc27c4829f08 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...