MAL-2025-112268 Malicious code in romantic_eel_gray-22 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9d104b13e520d41e56c0dca70c7046802359f7646d19990e0364ac51f40f9623 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-112269 Malicious code in rude_canid_rose-81 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d50918cfa811ee24eec76c2418fb447860162ab37c2ad2f13c2d294466d6b40f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in worthwhile_wolverine-teagooddev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 58047b211cd2e7a3817f28e57e2baaac0088116cf3dfcfe76c1bd5bb18e86ffd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in independent_junglefowl-strongdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fae313627eeae227f106461fed09e98aa830a42c0237df2febd1cca8186da64a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in crazy_ant-toolteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b51cc3ffbdc0185ca6c491da761392a8327902115b59f650a328707cc3012708 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in electric_canidae-silentdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b61323d59292daf6eb59c259f147da3b440a04d3866cf5f10959106224b9ec1f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in scary_quail-apptea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 65f72090122a4bb2af51859441343280e3e53341438ab731f532bcb340c67372 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in increased_partridge-biggestdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c0a568150fad5b4cf43541c05a2dc2f5c0dd4923ad409fd13881382a4db39bd6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in crude_lemur-gooddev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f70d08c7a3ad24864de3eeeb8a32da806f1bbcb1d71a8603290260c820222868 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in exact_grouse-smiletea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e509ef9bd9de28b8f907888b96298f84adc9a7609aa574c27ce053dce9dd4eae This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in working_cheetah-strongdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 664f115a7ef9e4b283c26caceb1cc6f520db3d11d8983ff62b26e7a206405dea This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in organisational_dormouse-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bc30fc21d87914c05357700f3fd10dfbd66da22cee58035a249f5e53a8e439b3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in complicated_penguin-apptea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3099232508f436eee9049a17467d4d2116c6992e98e6ba8f1acd66cc6acc2c8b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in deep_dragonfly-apptea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 01755fee062f21f75e56b8afb725a33e5484091eb2fcf1c82318ccc40379e17d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in aware_mink-tool (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2a0d5b798e5d3d2fabec7584edc19a56b595130041400392c9e74516237917c5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in khmfpi-devapptea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 957501cd44c1e9cdaebc3c8428d0527baebad1977c605e2c3adca064aac9751b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in unknown_mouse-smiletea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c14fcd86cd21a6a6bf1653e0484d25be6c925ca8a7c580a44098212bd807479f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in chubby_planarian-biggestdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a3684ccbdc7d89f7be0417e32b88a2ffa0c3635409ae605227bce0593b74a98e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in obnoxious_crow-silentdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c7f7d4287b723cc5d67bb9d13d0367f4f005cdcb96a79ff9633b0300103e507c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in bloody_leopard-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bac80ad7f22460df4f6440da45cd2bffb7c43630df3a60c7ccfbceb05d135438 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...