MAL-2025-155592 Malicious code in hafiz-36 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3c322091041c59de02afc3628ca58be55afcfa4aa5935c82b551154f2922b836 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-159085 Malicious code in mahnud-nofity-goniefga (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector add717999e49c8b755a3bc21155798378aae0bf256caeb942c9abe4775e1bab4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-165149 Malicious code in riyanto-poke41 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8e99c7705119efdb42afed0791a41709ab06cd7cf1b08249303016c3fc119c93 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-159729 Malicious code in mansia-tavil-madfoi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bcfb28a5456cf9aac5608d8438b4506ddcb66c588daf0d95cb21e2cffc5f0ac2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nokire-abimanyu28 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d108f767e5ff46bd356b5bbce8201b5f705f8063b2e70b7aeaaa99afd81d35dd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-153306 Malicious code in avminh-afagais-ifofda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector be8f856801932e05ce85dde171bb4667070accf2aa6a80dbc1f120d59c3b36ae This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in avminh-afai-fafoaog (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f6b21b8e749a5e79396e5a86029f7756e35d8c4f0f8586b1d96c25671c3b81c5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in teagood-manaki11 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ea7958219df62531a2155b133dd1df5b2494734e309f0f30d65dd05094275505 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nokire-genji82 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3a605b701b64087beebe6baab1614d10ca4d2b64cd5c3f968081182d794f497f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-152768 Malicious code in arif-poke58 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c97f986412703adc04b1e8c21102dbfd394e785559a8b9e60691568d541d2aef This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-162572 Malicious code in nokire-genji799 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 295b201da84df6fa04c720c18679a4ba17b22662456cf3168910deef9600fae7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-164544 Malicious code in prayoga-poke45 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5b8b9fb8f8741b2d44ae48ad0c7f310410fcbd536b2e3bab03904eff13f803cd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-153499 Malicious code in avomainah-fragagis-oguyunada (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6d843b85c43320ba76088fc415cdb3443ec919fc3f50e1569408228ffc7162dd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Attackers accelerate, adapt, and automate: Rapid7’s Q3 2025 Threat Landscape Report

The Q3 2025 Threat Landscape Report, authored by the Rapid7 Labs team, paints a clear picture of an environment where attackers are moving faster, working smarter, and using artificial intelligence to stay ahead of defenders. The findings reveal a threat landscape defined by speed, coordination,...

Malicious code in barnard-chai-public-loglevel (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 244f19577d367fc4d0fc720af976a8d7063e66a4eb3209ecf31de69fbf10a580 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in odin-venus-enif-metalsmith (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d086f3c3518497d4ae4dcee831d523bd73b0a05e4467a5ba429f860ddb95cae6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in eleventy-mdx-cressida-sedna (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d7f74c97d401a134f9b646a3669fbb031a73c2e27575285bfc7e10c686d79f91 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rimraf-morgan-hugo-quark (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ff18a072eb34f9cbc9d7f1976d7bf811c57d791fdd1e5e63e36e842ed1b7936c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in command-xo-ariel-atlas (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8a366c080a4eaa2648f83bcb94435f3176e85614a052f24641242493394fa733 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hyperion-dependencies-query-castor (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4f9ca77bdda7e3f73d12994e66143ef811ef1b2758f557d51470f9ed1acaaa65 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...