Malicious code in putri-nasiuduk35-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 08a4c6c1f1c8fda5424a0283ed1ddf5c168c26a1a3eabd11d05d1fc4c42d1e36 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nana-sambalado97-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 38ff1c57c0e65e0d0d46fadce66f702621b2d60f50af965fddbcf9d14f173735 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67659 Malicious code in defeated-apricot-termite (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7a1e2776f5a30d10e6fccb8e57d28f8772284f8f841dcdf6d2225da52a80e71a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71791 Malicious code in zonal-sapphire-crow (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3429ce151fa15610fc9d04dd6c46bf667f75b0e8dc1167fce6c19f70b8272821 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in scared-lime-planarian (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 44f39a6ae7c405d9fe01c38b6cbfa1f38603faf74527dbcbf2481c54dd89edfb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69478 Malicious code in monthly-moccasin-locust (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1b3cf794d51bb25c9d6629c8dd65cce142b09bae0ab5c11e956859ab33f0f23a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-65586 Malicious code in tiara-lumpur65-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector daf39f23a9e65e6aa9e259993650eb5f614a162745c0d4be25b34b3266bb49ab This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in citra-pisang97-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 781667d38735b1e5925bec1e3fa151ec023a363cc243b223246eebf94d8d836e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in present_yak_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ae95a722568b17fe1725fe58e4b69ccb8f8f6155a5f8f08baac301eca5230913 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sacred_kiwi_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ad1f240ad230a17852b5d17242110e28bc00ffae8c4e24fd53287b0bd38e77ca This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in siska-kembang12-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 662fd8a5f733866f6d77ce3a792085d5e5e7b0bc1af2d69fb9154aede32521ae This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-52830 Malicious code in hadianto-dodol99-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bc8186fa554c1f00ccb8381486a52ade5d2c67e64fa04b2a25fbe7c8e50b2056 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-51024 Malicious code in bella-brongkos57-pore (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 318b0bcc9e71e5a68b61d765c37d801a89bdf7a7038519bf07da0ed3b68cedca The package bella-brongkos57-pore was found to contain malicious code. This package appears to be part of the tea.xyz token reward campaign that...

MAL-2025-47226 Malicious code in eslint-config-crowdstrike (npm)

Suspicious postinstall script executing bundle.js combined with unsignedbitwisemathexcess YARA rule match indicates potential malware. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d5700b3786b16cd76be2c86bc19af1fd76ac0dbfa6bb16f29e3837fc94598b75 Any computer that...

Malicious code in mousewhite66666 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a42a543d6a08c88dab207bc91355cd7fb9564d732b071b0ddfab43eb7f7fd5f9 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in keycloak-theme (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware fa8e4f6226555a04c5be8dab42fe39f502765a1bd0dad057b6e8c057939e5dad Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in gcore-cdn-stats (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 12e65a6a05a2aec76e30706343ceed5456d0707acebe0e598c17a5215e710c9d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in tplibpy (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx acea5cffaa2bc2837fc5d521d736f7d8a34af63cf9daa9e264a29a3c8ba5e2b5 EsqueleSquad group published nearly 6000 malicious PyPi and NPM packages, executing spyware and information-stealing malware...

Malicious code in byxctlvkeqhduiza (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 981d84fff485e2abe8d3ac19a4328cc7ab70e98cc378f1a4966bc3776ce2f539 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in datadog-serverless-macro (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ba2ee7b3443a0229199bf0f65989cd56d3cc784e7f184562cd9a3d74c8501f4e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...