MAL-2025-61401 Malicious code in substantial_mackerel_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 295fddf05f59aac4501b08b655e2810975e4d7eb56be6c03bdf64363b8ecf4cc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kiki-mendut70-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f653b9dbed47433e8223ff39d35480a439daf38bdd3e60f294ea73ee5c621f15 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-57914 Malicious code in occasional_lion_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 66064a3ccab9d24e25f25b73a8666aa272b5b15ecbf4d1a861a6f598280c4741 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-57882 Malicious code in nurul-lumpur91-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4659ea5e3a6ae31deca02678dc24e0069a1d3f97eea4a6888a240f6112189a64 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-58924 Malicious code in tiara-klanting22-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a23d0bb9540b233c97a7321415d8a4735f07d6cd55aa23d3a231c46420996774 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-55897 Malicious code in disappointed_amphibian_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a655e47962f82a62b1a3147a47bbc3241d91ff520fc76eb947617e73a55025e9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-56218 Malicious code in fadhil-rawon44-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 51dfd9fcbac67bd3fdf037202b3604a6c1934e70c50f1fa899604e1bd3cf4570 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-56343 Malicious code in fitri-kue11-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0d7fd602f303876166d29edf29a96ca0f79a63990972557079b60958248bcef2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-55777 Malicious code in dewanto-kacang79-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c2b303a14a09dfe8ae4566284d5ae402c2de883da662d783399c02cb52245564 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-54524 Malicious code in qori-telur24-wekto (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cd8c4a80a782361142ff5f3a74c1d627a2c115b8588ff032bc0426263c50f87b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-54779 Malicious code in rudi-telurtahu81-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 290b165b87943ed671332de2172b0b28ca7f7b178287d816c136d0f05a99b5e0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ida-takokak88-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 50ad747a46061a380ccdcaa20dbccded8c5a2ad3af1c84b499a55be5464d9f1b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-53311 Malicious code in mahesa-tapai43-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c3f02bbf06fc0f482ddf095ac2415297e2448805c13933ed8cb05eb664616851 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-51956 Malicious code in gilang-empal50-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector df6973ed0332e1568b6b044bd4c988bab3f7f567beaf80435cdb85c80da629cc The package gilang-empal50-riris was found to contain malicious code. This package appears to be part of the tea.xyz token reward campaign that flood...

10 npm Packages Caught Stealing Developer Credentials on Windows, macOS, and Linux

Cybersecurity researchers have discovered a set of 10 malicious npm packages that are designed to deliver an information stealer targeting Windows, Linux, and macOS systems. "The malware uses four layers of obfuscation to hide its payload, displays a fake CAPTCHA to appear legitimate, fingerprint...

Malicious code in esqpaypalpulled (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx 40be8854174f42f60e993f5443bf82c68b7cd588fd0ed83b282915a8e631f647 EsqueleSquad group published nearly 6000 malicious PyPi and NPM packages, executing spyware and information-stealing malware...

Malicious code in esqrepymc (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx 095a097eab2f48a05502f2b72fa8c42c80cbd7957e960c326663e01a9a4bdffe EsqueleSquad group published nearly 6000 malicious PyPi and NPM packages, executing spyware and information-stealing malware...

Malicious code in selfhydrapongpaypal (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx b992777d40644141e2672e9d6cfc0824495c311851f067d867baaef5c75e859e EsqueleSquad group published nearly 6000 malicious PyPi and NPM packages, executing spyware and information-stealing malware...

Malicious code in selfproofcvrand (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx 88ed5a3a67e503938fd83d49d741766dd0e57de29f5a7ab213fee75922d473d5 EsqueleSquad group published nearly 6000 malicious PyPi and NPM packages, executing spyware and information-stealing malware...

Malicious code in selfsuperramvirtual (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx 59deb0cb03101a4548020b0c9060e266ba9cd15cca7c25833daa9c8327fd3d47 EsqueleSquad group published nearly 6000 malicious PyPi and NPM packages, executing spyware and information-stealing malware...