MAL-2025-189165 Malicious code in release-it-library-start-inquirer (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 348aaa3d96cbbca9efb6a3b8e5c7e01f9bfc1413dce9e60070864b028329ab09 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Dark Web Roast - October 2025 Edition

Dark Web Roast - October 2025 Edition By Trellix Advanced Research Center · November 13, 2025 Executive Summary Welcome to October 2025, where the cybercrime underground has officially become more absurd than a fever dream. This month’s headline was xltshirt being royally fleeced out of $3,000 fo...

Malicious code in lomi-ifush-ugofa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9c8e18f38edbba8b29d881ed50330de5f917b458ceff9378ee7ba9cf48ac9e80 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in imodiov-omfi-cafacevava (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4a722197a6638173077c8604159d553e1bcb218368815aaee412c61bb2eda83b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-183247 Malicious code in kisut-diufg-danuamffoa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ce5760eae659fba47723d88f4ec100f4cf544f5522f5f2dcb17e7c4e6ccccc9b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in itale-adci-hykaulaygkytang (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8e1acf95b54a8a6f1b93685f71bb39106292bdd7114871afc82fbcda5463911e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-183269 Malicious code in kisut-diufg-doa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b337272a9e1a0a478ee7398da30d02a3ecfda9c3f50254de940ce6164b7744fb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-184689 Malicious code in olobc-uyg-ugooffahi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7af11a758175255c4de58d55a66c1d7550a96ad49db839232007f8e91ef057d8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in teate-thy-sonic-aseawa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a6e9bdf402681c238a95a3d3c7319fd6e9440f1bc9574599af998607ed99f020 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in teate-thy-sonic-tewit (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 56921b1ab4a92ec0f8e0a36803e231d6afb9f6736c2a254c87e3479570d24312 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in anala-akin-ninluka (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3982f690ded516aa0353ed89c180da8d2d96961c99aff93b50e64a528bd2ed7a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-179559 Malicious code in anais-papoa-0paufafui (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ff966dc269ebdb4666f03db51b335d8479e7d023e269ffd554043a5e60805041 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in teate-thy-sonic-bovmij (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bbfe2f8db034fb28afe84fe6bd4b60dcc4e0744eeae444b573da32518126189f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kiut-acog-avefivubufuig (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a3c29ee558a571bcb5d4c14853f914125b816df429c42cce03ceb8c97b2ec0f0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kiut-acog-efv (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 033f5af2d20c2c077597e46a586c62c45456605a8194fe11c9cab0d9d0c8d695 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in divata-tutabi-ivnau (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7e7e9641ac45ca66a6f2b299a81d38faecce1ff5abf6b0ea91c31f9f3725c7c1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in akee-lia-tea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bed02aaf95689b25b2438f0185d8d70dbdb1ffd88a6a7ae8e96e78559c4ee9b3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in unimna-safafi-naisi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 346226161bf4ee271883c66f9fe1fe56f8e95b90f4d193ed8e88fcd2f997ae96 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kupaio-uloka-jaa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 48ce7e5f4ae1f3788607769a6135ff1ee610e9eda662e2a0953aa5e2ff20f9c2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nuilva-avmim-ruoovsv (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 690e22e06009cff7b454ce440aaaaecb525e8c3b12064107836be98e725debc6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...