MAL-2025-112286 Malicious code in senior_takin_emerald-83 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e6e6c0d4033061c5ff8c69f8c034f3c9ed68588cd63a4c2dc101290a8e2d1788 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in parliamentary_marten-apptea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9bc0f60d06cf855ce9f0192c4544a71770423657e1f5a6e4eefef66843cacd1c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in latin_cat-teagooddev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 123377f0f0cc8b522104a441cdda2757c0d1bd031ebbd73db7ee25ebc850cc2d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tasty_shrimp-strongdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ee4ba6fe0a6f98b5d65715842bebd85067b65a6da25ba15ca462d2e9ba3acf03 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in huge_asp-notthedev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6c0b9f00520358af2f9c6795d0a9d3d6d1dbac09302731090f89a73f8ae7baeb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lentengsakal-tool (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b4941f5d087e195991834e8e21aa63ae0e267196e95417039f6554c1078724a3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in crude_lemur-gooddev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f70d08c7a3ad24864de3eeeb8a32da806f1bbcb1d71a8603290260c820222868 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in urban_crayfish-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 96a110f635b769e91fdbf785888354f84ae408eaf237f9391320d55c3236a4b9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ugly_finch-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d723b856ef8f8685ddf7caea0ced4c11e863a16cc7df2210b56cd6902ab2f407 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rubber_hummingbird-silentdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2b020eb8d0af2775ea48b8de006f268535de12d86a8a3a55c5744e908050f33d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in accurate_piranha-smiletea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 28fd7049215d5b5363dc86e53cdcb38041637150ecdda735957fa46158b9037a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in zippy_tarantula-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0eeefa2515acaadc3022975249ad3caa109ce72517eea61400ad92601e2412f9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in inc_guineafowl-smiletea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1977978f3dc20826ec3c27ff32604b4f3953a60319a7082ed1d896264ebd3d77 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in indirect_capybara-apptea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 15b588cbebe6075725a1af881f43fd4edd8a2109b784b85054092f2b16c8abba This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in thoughtless_whale-gooddev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ca23b12e2bf8dab6e838567057a513471f3ca7c37f553f3fd9eff84d8b403b19 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in thirsty_marlin-notthedev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b5517df3ad4cbbda98b1e392f5a80e7ac55faa76bd6745c105447b821409a5dc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in voluntary_opossum-silentdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d39c6c3a29ca9456ff7a0ceef522f30f16fe5154889a9c35fd9b0c88e13e5318 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in married_guan-biggestdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5677577f855e589632ac412ae5a0683091f4df2e3ce7ec4a3fb9fc92b66a0fcd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in bloody_leopard-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bac80ad7f22460df4f6440da45cd2bffb7c43630df3a60c7ccfbceb05d135438 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in yloomz-devapptea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7b350257634b6c9a805ca7a5a4e42f3f07237f9ff2db3db0b393aaf8d62c8d66 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...