MAL-2025-60810 Malicious code in managing_gayal_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 132bb945a80d66d8d5cbf78cb5570ed9a24aa171df00cf977024754c13bd5578 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in multiple_chimpanzee_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 76eb13fcb75862b1971fcec1a17f7dc64d1e9e87565844ee70b8fad9ba51da9e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in usual_roundworm_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 58d4ff817d78a04175775fc90295c101f7765f56f664dcc1e484adc2532f87ec This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nadia-mieayam48-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ec7cc63a40d92825c60d734f056c78d6508241df493c2f44b11a7aabe95f9175 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-57220 Malicious code in kurnia-gaplek28-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d8b877d15351e20166409c8d899e71f25f00e4cf67d591e478ba8ce0f46e3213 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mute_wolf_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e9ff1ee9ae5629b987836126652938e30ddfcb68eb154bf7dfe3ad5c43baca48 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sinta-lepet71-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b45f9ad7e380edc016b78b2b99b254e54e5fd368919c2984ac1c5dc94802f6b8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lazy_cuckoo_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9b9a92e1aebe06bbee00a6d598f92ba2dc7f6f953f9ff1a8ea4acb1ad33519bc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in jaja-bika75-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2f1ae7dd0b5fa8aa437cd64c170f2d92ccd9ce267d189b5704420374bc412a08 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rina-klanting2-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e03beec5ded505308547bfc350f215abd04988338967c68f8c8d2ebf08556e30 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in jaja-kripik58-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 948bde4228d3ca6c44103d7987d6494451a700d5027ddf6dca5fa0514f6d01a1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-57934 Malicious code in ocha-keripik72-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a5e1b72ee564c4d54d2b325eb0eb7b74556065e6a47d51cbff729323a3f81ac7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-56992 Malicious code in jaja-sroto92-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 574a1c409baaca90f88fc8e76b0562182b16dfc9a2bdf5ac2a14df69f8fdecc7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

9 Key Areas to Monitor for Potential Security Threats

The old "castle-and-moat" approach to security is a thing of the past. Your organization's perimeter is no longer a single, defensible line; it's a distributed and porous collection of remote employees, cloud services, and third-party vendors. Every connection is a potential entry point, and your...

MAL-2025-54930 Malicious code in siska-rojak16-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 544400c991577e9a92f0d7d72337e176e93e803eb87f7cb77aab510fc03c0d9c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in siska-sambel43-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 86d3e16cd1e8d58db474dd0d20f8a9b2eb2e69549c503e6499a24395ded29ce5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rina-kue15-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f16770dd6e24c35def1f83d21db3873ed2a3bbabf33930e0574b0d5c69d2b566 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in jaja-moci15-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 37c284da4395ec0612633c3a81e9027ac879129b4fb84f33a5c5430cd280aff0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hanafi-tapai69-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 13f660fcf6201d787365c6d34ce6cc531c32a68b0f2a1b6f78d21ed83c350e72 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in joko-lontong64-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fbae03aeff0cd20b74265ba31261ccef9b54422a89da67dafbe43c1767bacd28 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...