Malicious code in oktafian-gembus36-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c417a612caa02b3dc9772db6857aaff85b060fee8290fe50c4799df34677152b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

AWS VDP: AWS Auto Scaling Service Reporting "AWS Internal" for CloudTrail Events Generated from Specific Endpoints

A vulnerability was discovered in the AWS Auto Scaling service, where 6 API endpoints incorrectly reported the user-agent and network information as "AWS Internal" in CloudTrail logs. This allowed the adversary to perform API calls using these endpoints and evade the logging of their IP address a...

Malicious code in faithful_anteater_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 405a2a9b9416e50d4ce2a6b9222ac0ef265bcc0b4c4942bf31f340057c76055c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-118398 Malicious code in zain-rangginang13-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3f3841e52ce064577bd6879b519f82685a84af5590a5b7b53b8ce4452425d8b1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in jaja-kue1-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a8f3de684208d37e2ed4c6d3ab863804fc7401e780b17fbd86e0aa80572905f2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in victorious_horse_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 05bdfe5dfd5dde402aa88ed220521ab69e81c58f2bbe03450197f46a6d07e112 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-118000 Malicious code in wawan-enting61-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9a6c9d6f1691c6feb69a44400d8cf9a7efe45afdf1724f1d13f4fc363e96b28d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in interior_peafowl_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 306fd0ba324f3cb3f4dd2868bc67834936d35ed4f226de457c9f4f716eaf0540 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sari-teh91-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ffbdf3c6e38d67b64016a5e64cf8a830de6768dda20071007e017760b434f597 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in emotional_quokka_rose-20 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0f1259c1b732827632cfa54534c31dd635bf1a9abb94292926cfdbcaf1c44903 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cold_skink-smiletea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0bb78d3ae3d591ca31c5fea3f2a91e83d9208102a0f26dcaf1b5743837cbb347 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-100711 Malicious code in coming_possum-apptea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e4366498e57beca3d73510bbbb01d00007b15ac1383952a7021eda4ee5c75158 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hon_silkworm-teagooddev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 03006fd9b338caf9558cfafce97120a720d9482071e99b04acc73475fab6c420 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dark_booby_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e427d8513c7fd0730ff421b591367bbc7e8fb51ef5db0d57071229863231f05b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in linguistic_lamprey_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a662c3a68a595d1cffa0992dfa014e10dd668fdc08e0d4984d56793f93eb6c9b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in awkward_roundworm_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fb4810a92490f4c556e9aa510d5f1823f957e7905fd2121f1ce47c39bae55a91 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in experimental_slug_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 433a40fd49f1f0092d21df196941cba9dab90659f5140a9935ed5973fad1fd76 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in agricultural_marten_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1387d660b37f3b5f61a43ebf8338fcf1abbaa1df09180df919859cf313c12e7c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-100315 Malicious code in certain_shrew_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 28dcf2f96b33a5117a5b3f207c5d84fcc26c1da06bb61219bc4ae223253a89e3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in respectable_turtle_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dc8bc5bc96a029b449ac226442267fc8fbd34f568b3ac1b4486575b604945b8a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...