MAL-2025-153273 Malicious code in avminasah-aifmgaga (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 202b73df530a2283141a2fb67c69e764401a05e660a9b0c2321a45ec01b3c39e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-151907 Malicious code in aiboa-molpie-aromioai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5a6b71855e8696cb28429aa9f01e737b191ac6fd8e32b204c688b3b683e6e6fa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-162795 Malicious code in nokire-lokcek40 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bc9abb863fdeaaf03ccb27d319aacebfd6d49e113bd9bb836c7e825ed8ef5d2a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-151761 Malicious code in aciyua-idusut-dajaur (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 11ec836719514cba96b03f7cf65d1ba9f6699c67fcce7dbaca7558078e89dd66 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-162757 Malicious code in nokire-korean7 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 44da7f41c13b93c664031c124ce911cfefb39c18b18b341c619a9704d58308e7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

[Webinar] Learn How Leading Security Teams Reduce Attack Surface Exposure with DASR

Every day, security teams face the same problem—too many risks, too many alerts, and not enough time. You fix one issue, and three more show up. It feels like you're always one step behind. But what if there was a smarter way to stay ahead—without adding more work or stress? Join The Hacker News...

MAL-2025-140260 Malicious code in busy-chocolate-parakeet (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fddb4341930456fcf26d397acec623f247a6d26b093fae7f227c7c4de79da790 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in centauri-resolvers-helmet-apollo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c75ee7fb75d478c231be298854de00c4baf6a337165fdbe78ed46807ae66605f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in carina-odin-loopback-mysql (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b9a9a886bb982839ebda50269955d0bf11faafd1668c2f4578ee66d69641b062 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rest-ursa-chalk-rimraf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ffa48b21337ae065011cc4a71ebeee38451dbc5d83d5039acf8de668c616f84f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cosmiconfig-mocha-mdx-phoebe (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 89e6409a70557c88c22b300d1eef3de7cac56caeb40ddfd9f8c457ffa474cb67 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in odin-run-script-scripts-bootstrap (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c79508cd48643557f134d37f5b6eb9f3da8274a39beb434b88d43ed6e801e5e2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in janus-magellan-quark-airbnb (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3696fbfcd478350fa5c64c1d68b7c5502ad6df5cf972b8cf3e69c7f0d811eb85 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in upgrade-vuepress-pm2-apex (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b4aa83789c0e6a054547a1cf51bf16cf72c40d7b36e6ff05521271570800e1be This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in gemini-mocha-impulse-grus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4b010660ad164a18819dbd6d24421ef243c375607f6d17327b70191151552afc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in radiant-local-magellan-dactyl (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b008f7cc192e9f504f1506fd14fee85d7b274ba80d2a60521cffc7753559a0dc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in apollo-server-terser-webpack-plugin-quantum (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 242351a23e7cfbb27df8dcfbf0a3ce9e20b76ec9c4b6267b770b2fa7c8a05448 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in commitizen-await-commitlint-config-angular-chalk (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c3ca5ab4510a606274ae8a004323b0e1abe851ab2bd6248263f9b5647d2de6aa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in quito-javascript-achernar-wezen (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f99885415d1f36f77e1881d4d381b6f8d4fb2e2a0edd684a8de5cb5464fc9ba6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hermes-acamar-pino-pretty-nodemon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 145f910abe8927390314d9dd02154054f3ca7651d75fe2efdae6636290baecd2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...