MAL-2025-112481 Malicious code in xerothermic_toucan_amaranth-81 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b574a307ea432a2cacd013af1fbf0af6701e92012dd8fa0f5a6df71381e5a98a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-112268 Malicious code in romantic_eel_gray-22 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9d104b13e520d41e56c0dca70c7046802359f7646d19990e0364ac51f40f9623 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in electric_canidae-silentdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b61323d59292daf6eb59c259f147da3b440a04d3866cf5f10959106224b9ec1f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in scary_quail-apptea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 65f72090122a4bb2af51859441343280e3e53341438ab731f532bcb340c67372 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in crude_lemur-gooddev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f70d08c7a3ad24864de3eeeb8a32da806f1bbcb1d71a8603290260c820222868 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in exact_grouse-smiletea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e509ef9bd9de28b8f907888b96298f84adc9a7609aa574c27ce053dce9dd4eae This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in bloody_leopard-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bac80ad7f22460df4f6440da45cd2bffb7c43630df3a60c7ccfbceb05d135438 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in empirical_herring-toolteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f93822fc9e337542b2af4b6b95d3e65e7c1cccb4870d5d7c0fa5987fadb88f1f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in overwhelming_starfish_replicate_automation (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector df5bc98e9741ecb54972ef5ce1dff009aa4dad1bc0b60acf56b07d48116b2924 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in collective_orca-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c11909598f0f1a8a028d8ddb1d37abcf4301d81f665d4d4ea6eef8ba4526f777 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in khmfpi-devapptea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 957501cd44c1e9cdaebc3c8428d0527baebad1977c605e2c3adca064aac9751b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in obnoxious_crow-silentdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c7f7d4287b723cc5d67bb9d13d0367f4f005cdcb96a79ff9633b0300103e507c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in detailed_giraffe-silentdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 662ea74f8ebf827fb9e8c8203f1f12475f4baf9e1568a4c5baf225ec8c3dfea2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nghgta-devapptea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4a3e45b64f68550c89aa378e806f1e91c4573b4d65928a39fcd70609bc477147 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in outstanding_mite-excellentdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a41b04d171e1a56be76b650b826a2d259c9cf3d2411fd6253af9ed50b3fb8a89 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in alert_cardinal-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ad3b61dcbef9a67749e2788464d73e9120c2b2a0475c3c2192a2d878eacdce24 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in melted_turkey-smiletea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0341df1349e97f3b43b74ce5833004f0aeea43aa21152ea5df512022f642001d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in chubby_planarian-biggestdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a3684ccbdc7d89f7be0417e32b88a2ffa0c3635409ae605227bce0593b74a98e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in working_cheetah-strongdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 664f115a7ef9e4b283c26caceb1cc6f520db3d11d8983ff62b26e7a206405dea This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in aware_mink-tool (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2a0d5b798e5d3d2fabec7584edc19a56b595130041400392c9e74516237917c5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...