MAL-2025-159262 Malicious code in makani-aiavamoba-ufai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 425d67ccf559a72e266ead1cacbf6131e1a102a45bb93cd93a2b84a4141a2464 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-167180 Malicious code in teagood-nakama17 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 606240b216754863ae5967b2d967f99c1fb259c9b828afc7debe6dbaa1045c89 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Phishing emails disguised as spam filter alerts are stealing logins

Cybercriminals are spoofing "email delivery" notifications to look like they came from spam filters inside your own organization. The goal is to lure you to a phishing site that steals login credentials—credentials that could unlock your email, cloud storage or other personal accounts. The email...

Malicious code in sadr-jest-await-elektra (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7f8f94094428f0a2150123a27e6aaa31f5343d172db32867c1deedd1ffd7de9f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in chalk-cosmiconfig-kinetic-lint (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3cdc1271ed7b3d96e54a5350600851bbb30cb982d8b55b36f0b4259d96c41a8d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cosmiconfig-await-cressida-inquirer (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6bd2568a507aef1951ff5eedd43bdd5b0ec74acef3c09457d804ff29fed8d97e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in query-toml-mongodb-alphard (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ac5ccaa2ebfe16419da2c790aab04492f0b9cc5ca3df72aeabe287589dfcf607 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142821 Malicious code in ganymede-sagitta-mui-stop (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cb085ce71feb6c66240d4895529a244af49df4f259aa4e0385417f3e708524a5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149096 Malicious code in vega-pino-async-xenon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a6d0f26680e56ace586af2cb62e80c1e93b2a6b1b0f4fb564bc901d72d68adfd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143180 Malicious code in hapi-cordelia-nightwatch-radiant (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 13468034b470d0d147c580c9399b008752ad04b2ce9f400acd324b01b03c9a60 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cluster-dynamo-morgan-radiant (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4d84da019afb622dfa09353a9c9711f4741db22e7ebeb3f066c21ec53ba3faec This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mysql-janus-non-blocking-stream (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c3e967f7af12b0fb31e73a1d41f54d76ec7e17f227ad7b707c8debcfc5dccdbb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hercules-less-elektra-hugo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d7113289ee85e9f5d55f5fd301260d14823c26ffd054923a793191ee7fe7d087 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in procyon-wezen-html-webpack-plugin-wezen (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 67b5af772803ada032750ec3f8403347e7a424e0ea7df55a1c9aadd26abc0e2a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in carina-loopback-zenith-socketio (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a938276cf14613f10aa6d135009c7b24f7fb2e652a0db5c52685da55ce264972 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cli-vuepress-html-webpack-plugin-eris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2c2432237f1723a37335764ec0a92fa5b96656aaf81ad501680076a8e1b4d646 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dotenv-safe-gemini-spica-materialize (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0d90a21326b456e45374854954b0fa67cbaa4f70120bb594b30d8ad762c87e9a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in equinox-playwright-xenos-solis (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4cc5f310b893a67c3d52cbcbf20c0fbf6d4ba00816213bf8a73618b3556d2d43 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in winston-antd-corvus-scorpius (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector abedf822a8547ae8ecf50d68853589a4cc4cb7fbee11665ad0ab235d5085f9f9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ultra-rehype-deimos-sequelize (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 32ade24bb378c76c036b71f2cbd39bf86692a9c9c7c9737f14ddbb3b7e65e841 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...