MAL-2025-170036 Malicious code in uinsu-loti-nalsi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e1f191b07a669075a07cab246a1281ce723e7c3b1c2dadcec809434d7f4668be This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-157030 Malicious code in jelek-ra-anime (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f70c518d6247a36cc1c9d9974eb5826866cf02683c93925a72778c263e1e4fc2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-168184 Malicious code in tealove-coki28 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0153a674f64f8ab1c6c7712e6976507cae418989ae02b3fec494a8928a0df395 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-168599 Malicious code in tealove-okta22 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5f4e5d64f6bdd024f8b833aab463ca039f8634f7c41a8795557eb93e83029cde This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rival-poke17 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 89a1753769fa99be19ef590bddf7db8b999bcdd0998ea086679beb958a6a253c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in verify-ayic-iamsasiha (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e6b849cd0c568262da5f7065fd0d467a0279b9f999b59ffdf99967160d680a16 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-158353 Malicious code in lookingan-konami88 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8a208565c326222c290f4488fc8473f9dc0b1ddb3d0f37540a2b9a11cfb2e252 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lookingan-namala85 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2edcf8384c9df6bd7da2a82a4dacb8e46d332cbbef2d3a1788b0941ed282a42d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-169839 Malicious code in uinsu-list-patul (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 42a146d119aaf5d3a3e5a09631827f32ea3479ae5b8180091a4530786aaeec6d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-163718 Malicious code in nudela-af-gaaffa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8111284d85a82dc7a8ea662c6ff46e047270ca7bf198e8b8c121ebed564301a9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kamasada-buyada-bua (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1f5ae5497ce9872364d7e9716e1fee07c5c572c02703e7685fcfe6f7cc91a9ef This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mansila-toafgviala-madakfio (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 60499c677f68032c057c74fff9981ed1cd1422571e5b0b7c9c7a16c267e93dc3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in avminh-afoaiagi-fag (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ba2dcebe5f988fd059e2b888c56a8e4dfcca403a4ae823b771f5b8464fb3fd00 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in aril-76 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 31ef139d50b97f982a8449e25625e946b5f147806f7cce9b39ebf8fdbcb40218 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dia-19 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b0a296981efc362d7e70a12cca07f53ba1b112f6ac2bba8970b9970f0e59e1cc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in bintang-tea45 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b4d997d4005364b9f4c92a2fe1f98d1d491303866d09ef65bcd04712a6b66994 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nabuf-otgigaf-dajafafio (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 96a6a682a0b5f1a1638eb4a51d4cb159dff052b141e2ce21d00bbcb240cdd47e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in manttu-rolsae-nutay (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9c8bff872ab98b2aecbec9c1bc8d5d8b9461cef134a10392bde885852420ea71 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in billa-87 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 752c6c0cdf538c9c64191e8bb54159e63e7f85aac8e3790ca144b306662f878e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in manuk-angi-gu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bf8ef2387c9a573b2b9068e9388b590e169af8603fb4a3dc403a12d87864cf03 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...