MAL-2025-102146 Malicious code in environmental_swift-smiletea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f925795c1392c280541b2428b14c3499279ba366fb2d7ba8e8f0c7188b00b609 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in opposite_stingray-notthedevs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 68fa7aaf6587fea87e3d1e8e86cf6b5871db91e150685a8036134a882ee69ebd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in adverse_dormouse-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7abaac2a5a0b8170c56d41f2f09444a32dffbdb8fb3e10fe8f927add3e9653c3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in conceptual_llama-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4dc0c23bbd3f0626ef3211a6eccf13f762805df8542fac183174d8f383abc38e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in classical_mongoose-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4b33dc9e42831c51eed6e3eaf32649fff24becb009f36564575a2c2ead8b0d01 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in obnoxious_bee-toolteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 24e75670d60db612c0f6d078a5ddc90ca89b684b3946d69e28b61ea9cdf70629 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in shallow_condor-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bca2bc5b518853aa692319413f1b17a8a972f554f39fd4def8b33e04194708f4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in well_tapir-smiletea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d28c0a96daf59b213b11394f85047ebff0849536353b815fa9ddb35ec8150af2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in inc_guineafowl-smiletea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1977978f3dc20826ec3c27ff32604b4f3953a60319a7082ed1d896264ebd3d77 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in necessary_marsupial-apptea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 406d8ca0a59370342582845d37a2d3a3ceb71d688d02cd1f33411ceea0cc9381 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in iymbfz-devapptea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e7b2f0d7c84f3f4897ac0b8dc81f8f47bf2e2b4fb9ea0eb64b81ce5d89e950e7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in jirhana-notthedevs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5cf8af1f013b42323a70dc8734b9bb73638fe7d1879b7f04759a146ad1ec0f30 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nutty_meerkat-tool (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3abb15454aa46416fee872303c6f3a4120561c0ebede87b5fa24fa5a27e35efc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in regular_gecko-biggestdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3059a1156999ffef056f2705073b421acd86a84f29c85dd1ce142fac2a20f78a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in overseas_warbler-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e2756378ed67366a874199e3d6a3a50308483bee7a41437553c356d1a07fa86e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in gradual_dormouse-smiletea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4251952a49b2cae3af1d10b442e768989294db346164a5d3d90355199ee08f9c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in colonial_worm-apptea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1377b9c2c58d800c2f9562461e7adb356e0c1b93a1774fa1e4ff1167ab54ecdb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in khmfpi-devapptea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 957501cd44c1e9cdaebc3c8428d0527baebad1977c605e2c3adca064aac9751b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rolling_boar-excellentdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1a7c5fc6154db0a885a09efb10b0740b9184c41b26adc4fcbcaac436cf641c29 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nfpiah-devapptea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6b6364b4bbacbc933c2256c72258e25fb5af909fb3c07d0aaaee5a74f4060244 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...