MAL-2025-111676 Malicious code in automatic_puma_red-45 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 687227385f1b331d50c0cdbf26c9e95df4079e0b2f6ac21535439f0b98ce38ef This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in eventual_mole-teagooddev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e8370273611d85cc81887a7c2a3151dbd510ca4e194a8647c004104341a43935 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sparkling_warbler-silentdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fa4faa781c8e89615343ef184a91a40d10c998aff9b31d2d97e347d598b22a54 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in delightful_egret-apptea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1b48ab3ea3169a7dde866b23c52c5acb8357bd1d5543d831f871d22b87add315 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in slimy_eagle-biggestdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9995c71084c23e2a26e695c8460ea4ea2194a2603edc60e4a6e363961d7e72d0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rlwqqf-devapp (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ee43cc2221f039243836c072a41ba87acc4d1639028c2d1cd05b69c5cd82c2d3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in feminist_stork-strongdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c8eba1cf246b221d69c6597e7e90afb5690b0f4722b51f55988a6392608c67db This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dildarae-notthedevs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 64af346f47ad2d6376f77a154047173c2af17b867c52ed4a99ce71a8e38c4acd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in everyday_cheetah_replicate_automation (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 016b0332515604eb5cfd84dc0c092914cae80dc7efc2f210df479419c3c49dd5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in broad_sparrow-smiletea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7bde290b78bbb99e6047127c4d4b454ff65d72c1b70514e2d9bed31072dd441c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in subsequent_gamefowl-smiletea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c1d6ef35f7c854744e777fcb0ddbfc25702fc2a4c65e062c1f85c649c8da01d2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in uptight_hare-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6d184567979ce47fa0a8a27d0e5c59c6692d948a8a91567c147185a921251467 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in scared_badger-silentdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b9007006e8b13015e17857520cea9df4ca68e9ea08dd78928b76426a01633483 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in complete_tick-strongdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7d4b7e9a95960a7a8f58c088e94b74acaa8e54f48590b3849b2f11603932bb41 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in big_peafowl-smiletea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 96e2310300bb3f721ed1be222175ab9a2f6e228573808e8f59e0247a81b95f43 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in powerful_beetle-silentdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dfc90956f95995e1894847973ee34a6b4fcd367254aa1bd04baafb4c62630b3b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in conceptual_asp-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7a9d50f74e68366232d02d52880ffde7ef821a03f669e20349ff1ae1dfd4a985 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in specific_dragonfly-strongdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 92057b2181385eb28852b2bbd8e2a40c07397e3eb4eaf312fa0774bbb7c3b728 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in puny_chinchilla-smiletea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2151b362486f892e1f862bcc0cc888e674d866c330e150aa351755cc9c0800de This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in precious_minnow-tool (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5a79b09efd8ae248af692d81fb67fb2e9f1f65d5ba88e94fa3e09dc6b917b67b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...