Malicious code in legal_sole_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 770dcd2bd0788774bb28371d2d38744bc32a4e5b3ae5772f93867a130fd07ed6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-59677 Malicious code in yanti-ubi61-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6e6d184dcb0e8ac7f287487e0ba4d9371f48dd2f773b3a9772346cdf17f6585f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in erwin-ketoprak75-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1f857212cfa1e8a7329452acebfbc8d5b6ae70c0ed9d8f16f57f108d7457f634 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in eko-gepuk66-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bddc7f2025b07e24f4f8e4ac5bab32ad9738f90a3e91c7120924f677606dce6c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-55303 Malicious code in bambang-nasi27-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b88a80fb841cd06344db2f32a4e2db547492b718d9ca861ab1cf8000cf085e7b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in gita-kue3-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2a1007e1e78040ce7a9166f20ac842ad6e0579cc681472c8beacb6b215bdc791 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in citra-telur85-remi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d7206e13f15e35cfed242a80e5a64d7caac21ee445eee809fa42b1dfebae3058 The package citra-telur85-remi was found to contain malicious code. This package appears to be part of the tea.xyz token reward campaign that flooded...

MAL-2025-51907 Malicious code in fitri-lumpur18-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1776bfa10e6d6a2a5fc8a2c8e0c61d82dcf2e8012ddc7e8f68e4e030215032d5 The package fitri-lumpur18-riris was found to contain malicious code. This package appears to be part of the tea.xyz token reward campaign that flood...

Malicious NPM Package Caught Stealing Users' Saved Passwords From Browsers

A software package available from the official NPM repository has been revealed to be actually a front for a tool that's designed to steal saved passwords from the Chrome web browser. The package in question, named "nodejsnetserver" and downloaded over 1,283 times since February 2019, was last...