MAL-2025-151661 Malicious code in abyikula-nioybanali-lauyubasukia (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d9ae39672323b421c3f6c4f4b4b89bfdb5a40acc8668b10c55e8f22c41acd326 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-157278 Malicious code in kamasada-natib-yalua (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector deb9607e8e52c50ef31ca4aa645ac5b1524b6e36ddd5eac80bbb8f76540302c7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-163299 Malicious code in nokire-rara13 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector af3173a3bc880af3652bd0943136db29c1d22e3c252c45089e7c8d9ca58f0a01 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-166420 Malicious code in sunderlan-ud-vamnin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7f967b30116455392413dec9354459311b77ba2a876c17b2a4040f94d3d13909 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-168388 Malicious code in tealove-naiman49 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 91a3957cb70afd2b1619c0e3d66311d5db9c3cec69c1371901137561989e4874 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tealoveness18 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5386219c203c7f978e01d05fe8dc6c9f28c6708a5519d81e1a95ca7688b9a176 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Phishing emails disguised as spam filter alerts are stealing logins

Cybercriminals are spoofing "email delivery" notifications to look like they came from spam filters inside your own organization. The goal is to lure you to a phishing site that steals login credentials—credentials that could unlock your email, cloud storage or other personal accounts. The email...

Malicious code in ultra-rehype-deimos-sequelize (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 32ade24bb378c76c036b71f2cbd39bf86692a9c9c7c9737f14ddbb3b7e65e841 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in yakutsk-kastra-webpack-release-it (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector da31a94dea166f9732544d8bc74d15fb23b8b8d49f3dcd8465de86a7b8ba7022 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ursa-express-buffer-commitizen (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0d80a167979bbebdf1747a6f8b1c3dd693c488a57b5fb438a0218ac2c54d051f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tool-command-geckodriver-atlas (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f3d4c1dfd04a531ec9f0f8abdf611775cc1f6fb6b997f973bad24c056990bfcf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in query-toml-mongodb-alphard (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ac5ccaa2ebfe16419da2c790aab04492f0b9cc5ca3df72aeabe287589dfcf607 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in terser-webpack-plugin-dotenv-safe-bulma-foundation (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 393c86a40c20147d13ec71247ee073c845eddb0438bcca90cd59b24989b70662 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in eleventy-spinner-gemini-framework (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 746ffb5d26ec0c2beb4033b4f6c4859ebbc33a46b29f81cce2bc4daf1967c915 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in winston-antd-corvus-scorpius (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector abedf822a8547ae8ecf50d68853589a4cc4cb7fbee11665ad0ab235d5085f9f9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in quasar-transport-spinner-concurrently (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ce1d6a0636d5218446d56d763786f84428863756f135aa1a6dc761a0c94d774a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in pegasus-eslint-plugin-postcss-iota (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0531401803a4a5dc24d00495ddce8dbcfa848942851ec09e9616e99dce22824c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147064 Malicious code in react-bootstrap-loopback-acamar-csrf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0e2204866b46af08416e01189305d8a67fe4cf159732b41f5e52e84a51b67bfa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149251 Malicious code in vulcan-rate-limiter-library-tailwindcss (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 92ca4da3b6360d40d6112678563f6472dad484026ac05cde729730f1baf9471a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142821 Malicious code in ganymede-sagitta-mui-stop (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cb085ce71feb6c66240d4895529a244af49df4f259aa4e0385417f3e708524a5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...