MAL-2025-191941 Malicious code in zakuraweb (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 aa544044c8a113eb904f97650e8132de793d3bab5a7328a3714495e3f6a2283e Importing the module starts exfiltrating Discord tokens --- Category: MALICIOUS - The campaign has clearly malicious intent, like infostealers. Campaign:...

Malicious code in tunis-kit-gahuadi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8592c11f2958f10cfc3205c12709579c98be9f0a7c9dd01e866a513bf0afd907 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tunis-kit-bogavi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 57898fef6929070fe1a668ad66a7e0eac73eccbffb35ab0ba2140f5b23e5789b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in itale-dci-fngduyge (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 49ae4ee65de2da1a72f4a9ecae4393c1589abc667c295e355c67940d3242da6e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in unise-kiat-bogaatipda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 42d8e7ecc7706b325d978feca18e5a0b915b2691ea507536175fd0677df8e387 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in astam-ifst-dikg (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 90022fb9e51aab356734925aaf6de982075f0406473d9023ed294ef58b67d036 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in manu-oib-givakisaois (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d7f8c3a402b364ef8b8c02e6590540f77ebace7d2165189450ab75c9dbd9d10e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in avangi-olia-iaiai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 47093a7d8448c760ea60c35f842c7e45f15ea4b3b9d0f0e4292175c4c700ea29 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in odasv-kiuu-bofauffsni (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bafe2ba65bdffbca4b1c025e2a54ad713667dd618400e18bb0461f202de65a81 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in modiov-kifni-ufavcseqiuban (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6d176eaaebec8a55e200b042befe310d2a10e4a39be440450767d3ffa20ef9ea This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-185250 Malicious code in tuis-kjt-garfuaavdfimas (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cf13173fc6d7dadf786993ec422acb0e36f4cfd4698b32450e3a10215babb388 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in item-at-labieagyeyabbjpeka (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 878430a00e3f60cc949230c90fef37d29749cc10bed468bc677917b7534cddd0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in modiov-kian-avumangaiab (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ccfd3c964e1788fbabeddf31cdfcae54097b7392ceb36af96ce87646c8adcefd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in inda-fodja-gugoa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2381618fb04382cb6b6ac8f5c237372ed847fc0bb1b5fd82466d27c28637d739 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sonic-kag-tgvb (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 248eed230e4efc313942713dd46334818cd9837d4ed782c4be3bdd5dc1694b46 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in flights-lutg-oida (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4e1712377801d05f77a800d3d4cd1b1357039593718297573da240f66b6e0acb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in poliaoz-aiko-akuivnaun (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 198288d7cfb413f84b5236a23ed3427a6a8bd61bed5df3f6062d7d79d99463b3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sonec-kat-fgafav (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ce9a4ee05dc5d114d2ef4f9829e52ae58eb62895672a6efe45c71653474629f9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hitale-irhar-aaeasdeadeasdeadef (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6939c2e0ca9e67b0035174dacb4af9b1a88a522beffbfa7911d7ac001ef79293 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in poliaoz-aiko-akuiun (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 796a71960504475e06582cf8a7efbdf718bdabaa2f3a4e1506102e867f2249f7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...