MAL-2025-189296 Malicious code in runtime-parse-user-authenticate-runtime (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 164dbfef9ef242d560dd9d9d3dd6fd1c685123e8497af22e16d59bf89ea029dc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in joviology-mocha-cluster-redshift (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8e9dd0d817cec48ab80cd4d1714aadf14d4ff65a48878f2666584abdcefedaf5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in titan-despina-zenobia-antares (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ae5ee25ca20a09d9abb7fc1a6d770bb3c601cf9ddba8f4d1880abb62fee026fc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-172511 Malicious code in verts-otfioo-nampogai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 94b112a2c72f5070fbfc9a6b8d802c4693a1d1ab735abf04b89f4862dce4540a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lookingan-konami42 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 509c36746a9ad3249b72c8953d37d3a86b7b34ebc4e1e0513dd625011b02532c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in alvito-poke30 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c08233c46cc5ff9c1dbcae74d460ee16cb29be246391dcc28cfabcdbd6e8db76 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in abina-mibiian-upia (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9a635698988a9d4b4ec344f32fb4f402ec89dc64ff0c236f85b943a6d73526e2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143647 Malicious code in inquirer-frontend-changelog-lynx (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b8c250a136f5d0990b830b851b42d887b841167f96ed2d9628e6dc86facc74ec This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in thirsty_rooster_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 75171397ddd5a33e341b2543e06c0527e80f1dae53a44c602b2ef04377cddb9e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in eko-kepok38-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1aa0bf4f8b079576b2ad7568580263637baaee70e1543af9ac761b13f222a34b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-135383 Malicious code in mahesa-mangga77-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ac815e98a1818f68295b96b6920d0f6905dead1aa032d022359536f7311ef34c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in corresponding_marmoset_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9ff337a532fc2c1d367cfaf94e2ef8278c543e15505017f220b6f6905b3142f6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sufficient_condor_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 27a00167a0b9bcc20b779ce146afff50586c26382d255103712b22946706b4b2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in vina-klentik84-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 87ff5ee426ccd5c8427345661a73c23b327612389f3ff6f8d9ab7e55e9eb173c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-115595 Malicious code in lutfi-kripik40-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b50d2f50e3ea23454d6284ab48da65ff4bc5b22501270dde3e72c66f0261c07a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-115105 Malicious code in joni-kolak12-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0089a5567dca848ab6d53eb88e88e382b670a89601ebfb67087025132db82b3b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-95000 Malicious code in indirect_lungfish_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0deaa7734c85539912690b1f89da232969d2d2417df31cc24894df43cfe471a2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in able_partridge_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2e178b96e979551b56fdd6b52c51dfb134adda125c49adfb39aeef791167f922 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hilarious_crane_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8ca5b46fe082d95a050ec1bcbcba767f0098b9bacf404fe8d62d395af9d7226e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-88917 Malicious code in nurul-nasisayur27-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4111993fcd725bf01fc5bc4d802b8621c8ad2fb62fc9859b89f6c67c40e0692e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...