MAL-2025-189237 Malicious code in rigel-markdown-pdf-jsonp-restart (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1bff23cd8057496204d56ef6a563c25287b1811afc993a576c7b38a7606534e0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189296 Malicious code in runtime-parse-user-authenticate-runtime (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 164dbfef9ef242d560dd9d9d3dd6fd1c685123e8497af22e16d59bf89ea029dc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in goodafin-nui-gib (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 35407aa54e601e5927e46f90cd64cd7f3c09f1d9ed36d2957ba8598b120aac94 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-177627 Malicious code in polymer-afaj-ratfaavdaf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 08e580c74d4f46026fc08dbf3c1fc5f8f762d0e1274333b72d2fc111e224f9b8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kapvino-sogdai-odgafagagu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 62fd95fe6313af7a815bc9245ed21e5471167ef2f315fa8c1a531bce1736fff4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in clodaghobrien (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9b6f4f4bd85b976af1fc1efd6a06d016a4820bf366e1f80696b220b3ec3ba4d0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-164647 Malicious code in rino-poke104 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5e936d6c76641f19277ffdef57832d1f80c7788995fa5545aa8d925867307117 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nokire-sekiya7 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c3a1bb913a5e0d054c0fef680ad4f7c0034403090dacee6bfa59ab29fdb6f80d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-163834 Malicious code in nudela-rahfe-naha (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 036dc4163679e2b6768f60c2c33efee47d38fd6596900cbe6fba95a1aeb46498 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-158386 Malicious code in lookingan-nakomi28 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 640eb5d4b6898355e5cc4809ecbd0d287ac86795b0ccc29212786429d3e389d1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-169520 Malicious code in uaragifa-afati-urufuayo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 210abcc797b3f3c8bba0329589767ea72481264a123901b4f6d80ab9579b522a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nokire-zabuza83 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dafa390f2de66f54b36ad30cb9c93657d3260947ac78c0868d2fbf0403115171 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in winston-nestjs-style-loader-orbit (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5ead96a3c959e7edf3cd9bbe01b3683cdfc8844591b5aaf62c39fc03d8343a08 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142067 Malicious code in enif-xanthus-spinner-run-script (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9db2a2a6b38813741e236952bf69ea1a2c3a40717e72f42046ef0b57d3e2ded8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in grunt-prettier-lacerta-miranda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 673afa115104dfb8a556d45232b63297c9af0feff550c9689b7a0bd3a244540a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139439 Malicious code in antares-shelljs-vega-version (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 744231827bd2a82b04772b377409872008fb9107fe387353ebbc28a5be47aa13 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-123858 Malicious code in unfortunate_rook_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c2d9b77a53410574b9eee963e4d13ff6c972271ddac57ea0c2fba41bdb9c156f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-120664 Malicious code in ida-kepok40-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector af26f56e04f1ad8c43f5ba153e6decf2a501211584a87e40dda15322d010b190 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-124723 Malicious code in zul-liwet97-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 40baf87736adbe68dfca4774fe8871ded574f6dd7a9514ce277d76144534088f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-117952 Malicious code in wati-bika85-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 55e320cc9ec5a01c340b89d0144d42422cdf847cd14790f5415da8f520a52eef This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...