Watch out for AT&T rewards phishing text that wants your personal details

A coworker shared this suspicious SMS where AT&T supposedly warns the recipient that their reward points are about to expire. Phishing attacks are growing increasingly sophisticated, likely with help from AI. They're getting better at mimicking major brands—not just in look, but in behavior...

MAL-2025-184689 Malicious code in olobc-uyg-ugooffahi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7af11a758175255c4de58d55a66c1d7550a96ad49db839232007f8e91ef057d8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kupaio-uloka-jaa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 48ce7e5f4ae1f3788607769a6135ff1ee610e9eda662e2a0953aa5e2ff20f9c2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-175576 Malicious code in ksai-kais-aji (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f1ea3a590946bde305f597f89254c22d4fd164ae335fefe0efa84162b67ab327 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-170719 Malicious code in ahnafshahid (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ff54af266ef726402d86091bc5416200b1ea561ef5782af83e923484a6aa0571 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in alfiansyah-poke53 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9ccac688ea291be37f9a452498d4f71c46391c515bbc31a0217a088eb063cee8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in bitha-9 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 52fa1c1ce3aa78921fdd3c45d3366bb589d98fa16b8380003ee64996c162d2d9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fadila-poke128 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cc5821df3cbc484f496c6b4e3c797d3c8c9fdbbf00c315cf5f4209320bbc9d54 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-164954 Malicious code in rita-79 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8d095884c539343405bac5b43c4536f3f8ee133cf5d172d933bd8818b48ccf9d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-161588 Malicious code in nabuf-otoiman-igamoigaoai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e43e1df098089bb3bacb65fd26f85c34723d4ed07e90fad048d16d12889dd4cb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-159667 Malicious code in mans-manapa-mana (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector abfe8db28204bac08c8272e135e3649fd27ab42582ddead4a99f7a3206971bfd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-154458 Malicious code in diago-kuli-luui (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2c94a6475921c6a82fe49028c914a033a2f9f551dcb947a1812843cfac9c1166 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-165710 Malicious code in samehada-fzhs-r7 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9093451aabb3195bc16518c3f0db592c64d580f87f570e09938cc3f768d0a937 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in apex-frontend-jasmine-bellatrix (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ffd8b8ccab7799216be46b4cf2e947e5092a34b8055fdaf5a7de01224ce7b9dd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in terser-private-element-ui-yakutsk (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e5256a58de5656427ce43274a191ffc9eef82d97edfae23fa63c7f134e0113a9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ida-tiwul29-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 05cbfc51ce5eded70bdf564e056701ffddc24358123f0a2814fddc1d42e57b12 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-134964 Malicious code in kurnia-rawon14-sumpek (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7c8deb35f0f8960ececd482a88f92d4013b7fe39bfa33011a5438b2cb7069a8a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in eka-taiwan99-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 67b564eab3513b24c922f15d99c19aeddd0088d120d75606bfbab63e89224a4f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-127905 Malicious code in kiki-menjes65-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5e7c6a426ee381cf30f2660d85229f7d9bae02f9d164d69a24ffd1f4fbc22ff0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ogi-ragi90-wekto (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b0d5e7e9a5cc8675e8af501f55eceb66e06a7b666b0142fbd73058d88bb0a0bf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...