MAL-2025-101770 Malicious code in dreadful_rat_dumbs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector deb8caa0b23184c54c06a2e88c93cd1781cda0d9ec86ecb27b7a8b8dc3120b0c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in smiling_magpie_replicate_automation (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7e3bc0dc8c8db1953f42ca0bb9555826c774c4759e768e6580c70a2e11a9ae7c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in final_woodpecker_replicate_automation (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d96d65936cd45f2e82d2ac2f097be596d1c80029c5bd21ae9dee1eb420555a0c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mcgrath-teadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0f455a5bc1ddcc9a873bcadb5c806a6a764cc21f2cbe4627b6ba6e168a44f775 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in misleading_koi_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 702e49dc97e5e81d88e7c38a25657952473499238250bb6f20e107ab0f17e97b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in prior_yak_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9146053e11ee15b6f6e820ed70b675433e38b4fc3ee6894f05ab0533d2f1e470 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in naked_falcon_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 81f8855a2f73664467fee3a222342ae5ed528efced12304b9486cdcf7ca9834d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in amused_koi_dumbs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c48f7e3fa4d466e64d7fbf7eca296db1b63c1e165353f428971426122bd72e6b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in outstanding_panda_dumbs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 672358ea6ae31ad04e4a4542c1f640af32a7d5c10a4a7ec46e8591ca308211a8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in grumpy_anteater_dumbs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 431696057aa0a2a618e944097166eaeaedd52a9ca82877c9c03637aed7def403 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in small_kangaroo_dumbs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bd0f391fcf7c5a40ace13ac39912dfa3b9fd2693cea49fdc599d16211fb5572b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in preliminary_pelican_dumbs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5b446d5a89461d7cd79a34db832abdc149799330fa016b231ff904dd835adf66 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in objective_meerkat_replicate_automation (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0b8a07620ad47a5f53e4f090f2d1f46ac7078f91d20031f011f0240456f11f98 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in stable_mackerel_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f427e8d127b6249a7bab6a75daee520d707af415d578b245ea2fb4f5a932c793 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in reyna-teadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dad5e235834b64bcece45acb1e7783a41b8c12459c3dbef75f497095ca3be0f1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in external_nightingale_dumbs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ec1ad5096e647db330b40badc84cd87c462f24321221b9f6aa9219ef15d8523d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in promising_peafowl_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a58c9d5a4d588ac7d005a25e5078b41008d1f1d163e4a0652a566124ceac30b6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in pure_guineafowl_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bdab5ac18276308605ab7e878f36cdfdc1c778643beb59f0448bf1175428828d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in local_seahorse_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4ab31c4e0fd34842d09f2420d51eed7be0eefaed6c500057a213354aa242e91e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in neighbouring_cicada_dumbs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e606de22a792160c9e3f5e0256bddc976ea67358b3eb13abd31bc32a3e63cd19 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...