MAL-2025-157026 Malicious code in jele-hentai-anime (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a1253f07ac83cdc4c158a5af423cfcb2f0fb79547a9cdced334747b564703ff8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-162959 Malicious code in nokire-nakala1 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3c65d0853d5b51cbd2d91698bd99e1bc04c334b3f6c851e344881497ea5d543e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in avomainah-frauasu-ofarfrau (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 72b290bdb62dc760f6f0f59f270d20295a91ebb5b4c177bd845d4b00fe1d7924 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150741 Malicious code in @miptaa02/insria (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 25b73c4ae3537ddfed7458fbb032578df3dac045dc4b94788baa3fcbe4c889d2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-165984 Malicious code in siregar-poke63 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 70d54313cc3df7f6b715ff4b2b0179fed04e549728c3706a7e9fef3a726cca31 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in teagood-yakuna99 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2ffe8d9e9111f4ad1b4a3f1de54a7fe8b573a2cdab9b6aa811fe3afda336ad9c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-156231 Malicious code in ilang-30 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4eb47064530c55628122c251c58694de35c35e5de7e7d0fbc3b4c61600b5d377 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in salabunuli-nalikuia-lusbi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ebf3d400f0282226c1bbff272dfc432cebce78001667e8288d02624fcb39b768 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in teagood-yakuna66 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d16a6cfe002c9246ef3ff4e15f79dea23e677f6f3d85c41969fba72688367ff0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in teagood-lokina86 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a4f2cbd5bf7c76f406e84ddb714274ceaefde23e1c96ad6d22911d140a634f5d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in makaia-ania-gugag (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bbb04c589a274ed4d74dcddd750cc10bfa6da863214805db22c0bd33ef89af73 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rival-poke2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9a0a639bf06f6ee23c110d4aa922ce9b727574fe48f1c2e2320944fa61ff84ad This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in saku-aiu-unianusiaku (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 876f7425ac6645e844445cd7d80470697568f4ac793228dae9b24010a9e1c03f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in messi-tuea-sdsf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2850d62609d0985dc154920bde50982851d26564e2f633919f86b9076cf96d11 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @mipta1/gkjlk (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 852babbaf62ac6c93f0f9329b63d570092a815eecc8ca780e9a2e8f03fe270da This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @miptaa02/weay (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6a910d44d4c8957c718b482a6fd739957180c26c160f4a1712d37fb4bd4afd9c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in alvito-poke11 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 10423a6d1dd6e3a834052a5570bd1c1fedb40a6eafbf192f57ae8495465af131 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @mipta1/dfsdaas (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6dcd9dff5d642ab7ce5e55ea0db91ab928f4676f82a238769b0c6d01e92028d9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rival-poke49 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6fabc2eba3bc2979a8df8a46054ece1eef059a96f17ab2ea8fcecbd38929bdaf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nokire-zabuza44 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c956b9639be09a2aa07e86372e9ac2386f585cbe810d10c17b65fdfffeaeb2ef This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...