MAL-2025-100804 Malicious code in conceptual_dinosaur-gooddev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fbf87c7d6a95b07b88626176349c65d66d17744dd8dbc2e9650d9873b9d49069 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in complete_tick-strongdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7d4b7e9a95960a7a8f58c088e94b74acaa8e54f48590b3849b2f11603932bb41 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mjiqrr-devapptea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5be478c0af81568eb07027dd30a2599c6c23267e4c50e18776d8b8268c90547e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in internal_beetle-strongdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9711b4536a8074abc2369706c0fb94ff33d015794bea749750c4d8005bdc3e0b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in overseas_warbler-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e2756378ed67366a874199e3d6a3a50308483bee7a41437553c356d1a07fa86e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in wooden_asp-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f244f42b656074eea86a669f56c91fe57b941f61d5fc138c97ad1108e9f5f35d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rainard-notthedevs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 98d96da356c19b9efa430671eeeec39684245931caa463e8284d2f90e6f1719b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in progressive_pinniped-strongdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5f3d851c3d27a3e1b275591e8a4c0605f1d68fdbdd8a16a039c312efdadecaaa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in grand_wasp-silentdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6cc3138ee54dc14dbb201e446493dc532dedadfeb84979db9e4f99da506a45be This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dsilynor-notthedevs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0566bf601fc1d2587cf3a8813df29d54ba128a1fc7ec62303197ee0a5cd9cf8c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in aware_minnow-gooddev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b260c1fda3ebe266fc08db7bd5c5e6ed22fd61fb4c9d09109e23017dba8a70ce This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in combative_fish-tool (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2a5a3f0c15a19983abb299e373ae2c8c8fc15a180d0e9dbce6c66618b0baa706 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in obnoxious_sturgeon-apptea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8d4b7ad2c7793631302e002726033f9f5a5e128d3aeb78a6ec46d4208b6a4eef This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in southern_leopon-smiletea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f8bb8ebd415f6d7f3857d8d9f93d2b48588593c753f986b4ac2ec4647bb1ef6f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in strange_cobra-tool (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b16911fe8f9bd4b786d7aa298b638912112535a7513e8f39b087f8dc8a708757 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in silly_meadowlark-excellentdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 18b9004f8275921bd5b1a18436ba470dbb5c7df10d2206ad9ed7726dab438611 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in zeroth_wren-silentdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ba0d8f0c7bf2a1ce85a0818f7338f5a3e33870f54338e01190196b52e4916671 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in progressive_shrew-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6566263ce2c35649a46ee6e60c1ae3dbd59231865a8c9bef2429955441c6360c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in crude_bird-strongdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dce16ff95e3fcf7093434f6e09f7a582534d55a0840e6c3ea00d19898464ff99 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in latin_cat-teagooddev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 123377f0f0cc8b522104a441cdda2757c0d1bd031ebbd73db7ee25ebc850cc2d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...