Malicious code in vina-taiwan14-sumpek (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0c18282ec86b7d4ff10343d9cd1875ad235521246540d7d0ed0773bd95abd9d0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-132122 Malicious code in arif-taiwan3-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e628b455a7a93641fcd33762bc6e933a7eff96c59b4655119beb6bc5fdd21b24 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in laila-taiwan46-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 209fc68fcf150e0344e4abc879bc6ad241784b158046cb24c5a548206ebb7002 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-124908 Malicious code in agus-taiwan47-wekto (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 15ed959899f9183fe86aeaf6796cedd9fae337d4a0aa4eb28ba864b067388dfd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-96132

Malicious code in nurul-taiwan23-breki npm...

EUVD-2025-106194

Malicious code in cici-taiwan23-breki npm...

EUVD-2025-93708

Malicious code in yuni-taiwan52-breki npm...

EUVD-2025-88370

Malicious code in tomi-taiwan73-miaww npm...

Malicious code in vina-taiwan29-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5a87d9d6a425422409cf1d34f7529d9fe5e80ee8f5f5ad6099a8dbe2d9289208 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-91918

Malicious code in fauzi-taiwan82-miaww npm...

Malicious code in gita-taiwan52-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8aa7aae9d7cabdbca2ab501cb27e39356e3c6b26f78051047dde9b7f9dcd6b2f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-90147

Malicious code in maman-taiwan84-miaww npm...

How credentials get stolen in seconds, even with a script-kiddie-level phish

This attempt to phish credentials caught our attention, mostly because of its front-end simplicity. Even though this is a script-kiddie-level type of attack, we figured it was worth writing up—precisely because it’s so easy to follow what they're up to. The email is direct and to the point. Not a...

Malicious code in kresna-taiwan63-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d715ec7cf694266a032fb7d60fad4ee465559e0093614104c683f1efdce19ef3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tuti-taiwan45-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 868995962b295b6cc651c82a4935de4faaf742402a2fb52f711755cff9f0f7fd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tuti-taiwan49-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7b119876725c5cd4e6f76c9b5278d60cce0c1918a5501196bc91a9ab3e61fc1e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in arif-taiwan38-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e45aab2a776480bfe67352cad6b856ab73d7cffeb63de9fee36ba09b2db2b5ea This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in indah-taiwan30-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 328fdcad8fe34704fb34435f086b642f710b6d9dc6b8ac667d66312feb9ab5f1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in laila-taiwan35-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d47eaa9145e5667adb55a66e79690ca0a0a6ac4a19a1be7abfdef8f098b31495 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tiara-taiwan15-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 28c9a6e805888e63ec400015539fa80fee8e9de57e15fdea6628803f56c120e9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...