MAL-2025-112125 Malicious code in nervous_koala_peach-57 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bb7a2306522f18c1a15d054bb3f44ea78a725748b3a4b9fdae7bc61e33ff781f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in accurate_piranha-smiletea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 28fd7049215d5b5363dc86e53cdcb38041637150ecdda735957fa46158b9037a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in bloody_leopard-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bac80ad7f22460df4f6440da45cd2bffb7c43630df3a60c7ccfbceb05d135438 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in blpnhs-devapptea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8608921111fa1ff9d9e9a1b52dc813aa2f07dfe573c32a692c952dbe3aadba7d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in comparative_fish-silentdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f606b88b3570d5f45ddb0ac16488f7553eed36fae3f6a5dadcfbfe05f33b6586 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in conceptual_mule-apptea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 689aa798a760c5d6094b00194513b75aa52623b4138900ab660531b6bff0c0b1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in considerable_opossum-apptea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1feb80b37d70dd37fdbaaca79cef61bb0cec83732bc26b636166dd950f8136eb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in controversial_bee-silentdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b431e3787c2ec4ebd5e85b1d5a9f215f340fb78914398902ef5b3468496e2ed5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in crude_lemur-gooddev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f70d08c7a3ad24864de3eeeb8a32da806f1bbcb1d71a8603290260c820222868 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in delicious_cricket-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c844b7bb9a7b8543413bd39ad20aab37c40893ffb079b4efc22c9bb1151d6198 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ejbwdr-devapptea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 994145096f0347db0719ae2ce25c0ec8cd0c63a147d1f18bcb8d8a1eaaa9591c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in eligible_sparrow-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 625cf46df8adf2310c36b78f91ceb9db843c5b09f1ad9e3257b30432177b4d74 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ethnic_cow-smiletea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0f185e00a594c2da80feba65a2a039efeba377b537f7e20ad98b03376a8b6a1a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in exact_anglerfish-smiletea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9fdd875cabc3b835f00cec4d1fd9a9c4cc99fec7d253778203136235180a947a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in exclusive_stork-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cac9be1277207513775528cf235991ab5ed347b73328d1af6d3e02e732745b1e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in federal_viper-silentdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5b645b0ae4b4bad34433e75daee27e89b7f99536901b774cbf49ae5ffc5462ac This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in feminist_finch-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 21e78152a8aec9a5061cf11baad87f57f85d664312384ec12b6fdacc562dbe51 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fluttering_pig-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b6b38bd363985d8fedfc0cf99c6b13049e2eb8c6511c1c0379a0763fb0dca7a8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in flxyop-devapptea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b3954951441fdefe36fea6c9bc7a2591b9997b6217717632e9ea2f1e106f76a0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in frequent_xerinae-gooddev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b07bb44b0d84bef1a8a627a1b033ff756332f63a9924327c8836c771f5f6bfe7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...