MAL-2025-112414 Malicious code in unaware_ocelot_teal-79 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1ba2902102cbcff0eef6cab9aa471913a72e09cb38b81977bfe56301782b10ce This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in low_marsupial-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bc358be3bdb621ef5306b5a4cf983279447c27d66cb7cd955ec3525cd392c61a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in indirect_capybara-apptea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 15b588cbebe6075725a1af881f43fd4edd8a2109b784b85054092f2b16c8abba This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in zippy_tarantula-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0eeefa2515acaadc3022975249ad3caa109ce72517eea61400ad92601e2412f9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in parliamentary_marten-apptea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9bc0f60d06cf855ce9f0192c4544a71770423657e1f5a6e4eefef66843cacd1c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in thoughtless_whale-gooddev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ca23b12e2bf8dab6e838567057a513471f3ca7c37f553f3fd9eff84d8b403b19 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in bloody_leopard-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bac80ad7f22460df4f6440da45cd2bffb7c43630df3a60c7ccfbceb05d135438 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in voluntary_opossum-silentdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d39c6c3a29ca9456ff7a0ceef522f30f16fe5154889a9c35fd9b0c88e13e5318 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in comparative_fish-silentdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f606b88b3570d5f45ddb0ac16488f7553eed36fae3f6a5dadcfbfe05f33b6586 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in huge_asp-notthedev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6c0b9f00520358af2f9c6795d0a9d3d6d1dbac09302731090f89a73f8ae7baeb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in latin_cat-teagooddev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 123377f0f0cc8b522104a441cdda2757c0d1bd031ebbd73db7ee25ebc850cc2d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in federal_viper-silentdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5b645b0ae4b4bad34433e75daee27e89b7f99536901b774cbf49ae5ffc5462ac This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in iixalim-notthedevs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a43bcf4d0be1f1051e4047a1e16336aa80900149f2d39095c2a019a985c829cd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in thirsty_marlin-notthedev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b5517df3ad4cbbda98b1e392f5a80e7ac55faa76bd6745c105447b821409a5dc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lentengsakal-tool (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b4941f5d087e195991834e8e21aa63ae0e267196e95417039f6554c1078724a3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in naasfdn-notthedevs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a7f5358b2055c697da27c1d8f39afa8c97d8fc4d52316b33c36489884a7ae912 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ugly_finch-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d723b856ef8f8685ddf7caea0ced4c11e863a16cc7df2210b56cd6902ab2f407 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in crude_lemur-gooddev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f70d08c7a3ad24864de3eeeb8a32da806f1bbcb1d71a8603290260c820222868 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in capable_goose-silentdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a25eb945fb573fdf75dd740e62e3c15c6014b2d746ad9b06efabc57682537f91 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ethnic_cow-smiletea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0f185e00a594c2da80feba65a2a039efeba377b537f7e20ad98b03376a8b6a1a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...