MAL-2025-111762 Malicious code in convincing_boar_harlequin-32 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4f42b51ea34fa1556f0adcc2472c89ad6d7e572dd723aa5faf39ec09c16ed10e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in muddy_eagle-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d84f094a7533deffaa09c07ae1fa7ca272a8751aadc5ce9fc02af3b6fb47bcd3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in confident_bobolink-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1a444b83cb8a5f9b75500c55bda5633dcd8c01f9912b3aa946f2f28aa20b4406 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in foolish_halibut-biggestdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 05efa28fa5e0db7da65873a5ee3ae334ae491da9c8686048f1413ba075c09300 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in agttrn-devapptea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b25517e2db6c7d9bfdb73c51f57e0c25c6f3a997db815492dacf1320f6b9fc8b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in aesthetic_porcupine-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0ee6ecee5008aa9537d5bc54ebe94ce63d3fe61dae01dd8becd0992dcc382045 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in obnoxious_sturgeon-apptea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8d4b7ad2c7793631302e002726033f9f5a5e128d3aeb78a6ec46d4208b6a4eef This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in vast_boa-notthedevs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cdbafc89e67f1da2bb86c02b6f0dd51156891a0c47fa9ef47bef1eb34da5c38c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in great_bass-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f8be4b6f97a4ef1607cf96d2747c2a68dc865c46f44bb335acc5f11450175d9f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in different_crocodile-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a916a88750412b67d0c291a46c1afe113e5a0dc6ab9c177fddf4f0648ad5f4b8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in incredible_echidna-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 485773f74deaf4f26543fac3d4d435274914f78bd579e19b416723fab9e89034 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in net_tick-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4a98cd408e078c4418c0ecfb162376699449bc504d22ea143d9881856d90c252 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in permanent_xerinae-excellentdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7b2eafaa8b954c74d02382021c67032f359aaf72a752f6b1b249b36cb9922989 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in xxtmzl-devapptea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 596fec4920ed4699df8f0540087a702fbb43649de3a496e38a829be07c4a5980 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in allied_python-smiletea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c8668ca3d2fdb8166a44f4c2c17764a82da35e21672d230be7e8dadac1f2877f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in halibut-notthedevs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 947a0e7b4117084bbbe08652184ecfa3c7e1236e539d709fb3ec51f06b2f9d9f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in unemployed_cat-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 609761f8fb0e6a2006653dad75cf9538bff527038bb69bdaf75bbcdd1ce42832 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in jefqob-devapptea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8a513142074c91b06eb3f1e9ad7e1084ff7e706cfcfd1ba4eee78a36a4e86853 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in decisive_silverfish-smiletea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a4bd4f38dad914b72c509a8d57d247a9037fd94a36789ccdb4732c4518977c6f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in funny_hawk-smiletea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 42ee3e1dd0779e50f9dd1d4c906108b8e202636e41addfeb96f5523eb2fae4cd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...