MAL-2025-163299 Malicious code in nokire-rara13 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector af3173a3bc880af3652bd0943136db29c1d22e3c252c45089e7c8d9ca58f0a01 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-164626 Malicious code in ramadan-poke40 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 849688622e953baaed819723f3f130fb58f7da7e4339102ad0353f3b3c993613 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Phishing emails disguised as spam filter alerts are stealing logins

Cybercriminals are spoofing "email delivery" notifications to look like they came from spam filters inside your own organization. The goal is to lure you to a phishing site that steals login credentials—credentials that could unlock your email, cloud storage or other personal accounts. The email...

Malicious code in electron-builder-optimize-css-assets-webpack-plugin-betelgeuse-css-loader (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8b7777d64a1343f42e8f80d8f8f3cde9e71dd74d38f9850534c9214756d79df7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in quasar-transport-spinner-concurrently (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ce1d6a0636d5218446d56d763786f84428863756f135aa1a6dc761a0c94d774a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ursa-express-buffer-commitizen (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0d80a167979bbebdf1747a6f8b1c3dd693c488a57b5fb438a0218ac2c54d051f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in package-bunyan-uninstall-gridsome (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 927e4554a71f66a6a4f439906cade05f79691db231a52561db5eb5d1eff4627d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in chalk-cosmiconfig-kinetic-lint (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3cdc1271ed7b3d96e54a5350600851bbb30cb982d8b55b36f0b4259d96c41a8d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cosmiconfig-await-cressida-inquirer (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6bd2568a507aef1951ff5eedd43bdd5b0ec74acef3c09457d804ff29fed8d97e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in query-toml-mongodb-alphard (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ac5ccaa2ebfe16419da2c790aab04492f0b9cc5ca3df72aeabe287589dfcf607 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cli-vuepress-html-webpack-plugin-eris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2c2432237f1723a37335764ec0a92fa5b96656aaf81ad501680076a8e1b4d646 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mysql-janus-non-blocking-stream (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c3e967f7af12b0fb31e73a1d41f54d76ec7e17f227ad7b707c8debcfc5dccdbb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hercules-less-elektra-hugo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d7113289ee85e9f5d55f5fd301260d14823c26ffd054923a793191ee7fe7d087 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in pegasus-eslint-plugin-postcss-iota (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0531401803a4a5dc24d00495ddce8dbcfa848942851ec09e9616e99dce22824c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in postgres-zenith-gatsby-reveal-md (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f848a04c62462ebd013014e94dcd21fad1daa9a9bf0195d04d8e99c9c335dde0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in procyon-wezen-html-webpack-plugin-wezen (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 67b5af772803ada032750ec3f8403347e7a424e0ea7df55a1c9aadd26abc0e2a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in carina-loopback-zenith-socketio (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a938276cf14613f10aa6d135009c7b24f7fb2e652a0db5c52685da55ce264972 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sadr-jest-await-elektra (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7f8f94094428f0a2150123a27e6aaa31f5343d172db32867c1deedd1ffd7de9f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in callisto-koa-passport-init (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e0618017da8555c11693d63a92fb08bd79ee8b5a12fa2199727a8fbca59b2c45 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in meteor-odin-kastra-blaze (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 807f19146fb1323fc3397526aec5abed6b4f21c91a207e554c5fe63341877ce0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...