MAL-2025-112253 Malicious code in renewed_porcupine_green-83 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 603480d97638b5562a44c79353d40f3b3e44bdfce7eb0f77a6e631505f95f99c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in aerith-notthedevs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ad2d79ede5dc5fe4e4b5632fdc123c5bc657f5abd3a6f7e1adc53245280dd15a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in slwrxu-devapptea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 40609334f486e3638a3819f834cf8e39b963bcf233891b30c8fb7e92febeb6d9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in christian_worm-smiletea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 66e7322ca5a6ab0ebe51d44632c55d9285383acb636ebd6f414f9b63e8a9d76f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in holy_rodent-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 002a681d5f9b3bd79b42a6df333611928b54aec15ec8b6c35b1c1abb557de9ab This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in classic_firefly-toolteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4faad2bb4b9865717b149efd985e0e9497f9879b48ecded3533633169f65289f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in operational_camel-apptea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 52373e41be8d9ffc9e54530201db78cb652f942bbc85449cbceb72eedd7c1280 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in charming_turkey-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e028616da646ddb18ff811b2782de9866779001ba95a77df26681f0b35e1903f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in combative_firefly-silentdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c3e75f413eca8e1a42f67b6530b14dd8cbda16b6af515f3f2e58639e58be02f5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in integrated_possum-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bb1eeddae19c82e1ab973cb9b2803ba18922796b7bc00229f31dccc68dac84fb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in seblakkuah17 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 260f81dc730efc8b5d7a3d33ae692e51bf949ff8825e65dc7f9494f2ed49a7ae This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in enchanting_armadillo-smiletea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b19bcdcc333361864dfa2d323e314a60aeb891199098468ea9a83f811a868c16 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in overwhelming_starfish_replicate_automation (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector df5bc98e9741ecb54972ef5ce1dff009aa4dad1bc0b60acf56b07d48116b2924 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in collective_orca-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c11909598f0f1a8a028d8ddb1d37abcf4301d81f665d4d4ea6eef8ba4526f777 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in chosen_orangutan-excellentdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 76114e5be17a81cd5e389245a248d6144fb69ab371d0173aa91cdbe956855d07 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in collective_guppy-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0a80eaf431a573c5d5aaee4e76e8c41f261441475579c0d95d122302e86a25f8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fuzzy_narwhal-smiletea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d65a52e2e0c702c6dfb1ab0a37a0f0953bce75eeb735379eec0287299e3b9542 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sympathetic_dragonfly-smiletea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c72e6a178c2d4d1321e075139d6420ef0487534a68a79ef5c5996d592de8331e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in biological_walrus-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b58ee5fa3e76df96ca8088f67d72f2eb23272cea558588168b7d6573f52f4bd7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in conceptual_llama-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4dc0c23bbd3f0626ef3211a6eccf13f762805df8542fac183174d8f383abc38e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...