MAL-2025-111550 Malicious code in zestful_swordfish-biggestdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8321a931f1e1507c610b936feb05c83a38bc04bd45e6ab9ddd4eb8262ece7408 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-103738 Malicious code in hljwhb-devapptea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cecfe5e9ec4016f18fd6af0a29de472cd365624159544902ee3fdbe93ee48373 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in plastic_alligator-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3f99c0bce27d616eb61e7ed66b39fc84348b08122c6b943a176da7483521f3cd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hollow_dinosaur-silentdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b8a7ef8b88ccf1ad7efe32f7bb8520f604fb0eae09220aef1dd870478c0e6593 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in scattered_unicorn-apptea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cd58352a5724f124f50e67f45354177206d87a89b69341d2358bec4502ff564c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in yeasty_leech-silentdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0eabc5eb0c63c45f97057171d7fedb8d450081042bbfaecd50013e36c7fa9898 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in renewed_quail-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2d923cfb6843cb25e14e7e4fe1de0d8a34829ec1c708c3be1d1fc7ed48056f65 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in aggressive_iguana-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector de64f0e4fc23f1f31de352cc7523751954529609e5883fb8dd12f928d9d8e306 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in muddy_echidna-tool (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 048e6f9b75cc517322db4d1cce350ee7ae4d49fc4ac5bb85672d091215cb6a59 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in gross_carp-apptea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 48730d3ea026f4fadeabfbb3419067ec4e1aaf87d147da865512fc24a7257759 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in experienced_reindeer-smiletea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 519d046d81659465a75e5ec5aff3cadfbf16e823a64fa219e9de77442b5be87b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in automatic_lamprey-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1e0cb6fc6aa55f0639e62b3d59ca83188313f13ae4e545775b4f8ab298509e0d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in super_aardwolf-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 68f1282fc8f7e87ec550f799c53c62d00fb4c8d9ea1812f15a1e8600a4f44f57 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in characteristic_whitefish-gooddev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3aa0d57056e3efbc3a105bdb76ebfd473415bccafe8426aa3b062d2f15dd66bc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in developed_xerinae-teagooddev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6866d09abc16757d4d76defaddd023e85a31a0386671c2a41220577ad9e6f3f5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sempol-notthedevs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 814acb7a9f39c0d382d6b0a45eb732fb1d39fe4462cea87d7aeb1facc6e2d866 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in external_mosquito-strongdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 78bbfbd5f029bd4ca36db594ae68e5d8212ffb479ccd134997a7aa5c29cbd03f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in entitled_cuckoo-silentdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9328b500024f7f91bbfb75de056e1b05a4edfc5040d66b03c69c0056045068f5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dry_weasel-strongdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4c6879b2aab1e3b7ab3f3679d9bc33d9a149a8e453e5c26f159efb10122d5d29 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in waffle-notthedevs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c34089d709c9f2d7da310967e08426b003e9fe6fee92e30f0bd36d4983467de1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...