MAL-2025-170738 Malicious code in aineflynn (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9495621246fa8a18623028080b56e314295d7c256d5a4e58a2526befdcfb3176 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145648 Malicious code in norma-registry-async-geckodriver (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 13eb62efdc128819d4e6c73446ceb745d539c8ef9c8e3debdd1972bf6210cd8f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-126546 Malicious code in fine_takin_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 637d3f3ea1fbcd5698448739dfb74fb39afb644d083bd12a3b9e9fafba165135 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in famous_whale_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fe4886a691e02d721063b4f74020d360bdb8acdfd3dc10a34e44a9267ae557d6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lutfi-peyek71-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c9932133444a4bb6860baccea63652786d6bec8b48eb751b5610ac533b27e1af This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in pgpwox-devapptea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 956d89b3f7c64b6d6cfde6843c7304a41070d45a08109fc44edac56ca6b8db08 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in current_sole_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 706756afef365bbf35d9d2ef0c2dde7c8c06ee4c027b0d08fa17ac68778bdf90 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-57827 Malicious code in nina-mieaceh48-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4582572d1e8111fb5f3256682219c938b9a809ae69c47e15ff8a6772aed5fbb8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...