MAL-2025-59351 Malicious code in vina-rangi8-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 55ab334aaafd265375a0a714d04ef624fe976a8f96d1572bc4a62790c6fc87a1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-56896 Malicious code in irma-pecel51-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 99ce1ada0633106e2c2003a9f6527f42ffa24ba020e039a65c43791c0b719814 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

9 Key Areas to Monitor for Potential Security Threats

The old "castle-and-moat" approach to security is a thing of the past. Your organization's perimeter is no longer a single, defensible line; it's a distributed and porous collection of remote employees, cloud services, and third-party vendors. Every connection is a potential entry point, and your...

MAL-2025-54913 Malicious code in siska-lodeh13-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5b1e8a00b7724cd0236ce94cc1ac8746dbf8648fc6ce2f2d982b3f1962d81cf9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in siska-tempe67-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4669c0b978e0d44faa2b69edc30032ef8bff05dbc3ab82b74f50456717bac0c4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-54934 Malicious code in siska-semur10-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 39ad353e2932788a3ee0d3f09057f8b6ece51ed989d710f0d331602cd47255b3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in irma-pecel17-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b965338f7b1ea62c237d793d56db94e1489c25dfa03703256388edd4fb6280aa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-53756 Malicious code in iwan-getuk1-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0aacde88cb9e2ca5f643baf20d2358e3f4afb1e9379b7fb7fd65d440001c080c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-54032 Malicious code in oktafian-kacang8-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bcf91ea204b1ff3fd59ad98e571397c7d33743727be13a67fb61439c5a7b86a1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lina-rujak45-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d1f5c1c1aabaf6ca9a7a058aa928ebf58de932a25f194e148878f929ae90f593 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in riana-bakso40-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 725b35576d439390a9912f682ca49191c080c8c196cee149c04c1f5cd9a55184 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-53896 Malicious code in ogi-soto24-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 95cf4bd7fef1feb2707f025636a867420babe9ca20e02a5a4b03ef25854252d4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-54026 Malicious code in oktafian-getuk67-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b1416603a838851645e2fe98398863fdb5f3707dd5ad56817a802b0fab09af89 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-54647 Malicious code in rifqi-rendang86-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0b58e08779d98dc44b6fea2363c50d34faf9f3d5f6e1947a20c885969190d7db This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-53758 Malicious code in iwan-jamblang7-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5cf4b3862980ac989f9d89c769d1eb6e1843a76afb6ecb49a0713c29db23b8df This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-53945 Malicious code in okta-lengko22-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c0c33284e30a890dea31880c79abfc0c534342e175691fcbe299ab1c0ce532f1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in patria-lutis34-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4a9b051de3c6bfcf5dd6f9fcc89be3ec461b88e34731d36b1a18e26ce9800d98 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ogi-mangut25-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b6ad0368e4437886cdab2e2d1ad6ff0516fa6e46a01b702b637b4fa96b822876 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in irma-kue80-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 425ebe6ce9342aae3c8ec425fa3ea8179f3fae9dc583bd867c50375f83c3ae8f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in putri-getas67-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a526ee464014a8a3d4d4e2a5af92be1996ffa6b96f898e6129d3c58741017e8f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...