Malicious code in cici-telurtahu25-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7486f6a4874296782f50ed6c0e1a010713c88cfe4e766b03d0cb21833d837405 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68218 Malicious code in fair-sapphire-squirrel (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 57079ddacf02318f21d0a06f5a5e5c81d32e6b51296a41e355c958e3f074a6c2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in natural-jade-peafowl (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector efce94661a21913946cba450b0891f699316d9b3e24990bc8d574cf3ec765967 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in broken-olive-fowl (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 701c3b9151f568cf54840add388d8e29980990fbfb2d3e9892077339aa50e29e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in following-plum-planarian (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a1d1a665941b9f9a12d4395e4398ed97a46f0d5bbca94f29f4f6f417a3291c69 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in various-purple-coyote (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f792504884d954582bc65a3b02617d11bb6a41951da2c5dcce49b4578744a7c0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67064 Malicious code in brief-yellow-crayfish (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 169054993c270b3cfc19dc7c79db22ba4a00376bc16f6c6f05ee91e53afc2e08 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in intimate_marsupial_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d0f7e3c7cc9d67d31d1838013f50ccd59e74096b6e7204ce429f79d3f80df48b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-59965 Malicious code in anxious_clam_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3a59d3ec2988e02ccc03d0b48f65905f758b5e4425ccc0a34a4233f03b7a80f9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-58995 Malicious code in traditional_turkey_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ebcf3cf5b2fe872dd9787814b58edf3ac8febc03be3483d6818db8bc2aa91889 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-59411 Malicious code in wati-rawon51-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7df3e50b332bd7fe3371b177c79e7a8491ef1d42bcdffbbddcaa8de06a6c3ea8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in patria-lupis24-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f24ea82619b36fc1a6f84bd389f5b0cb9408fa46693b9684bee6f31e4cc82847 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in surya-mie79-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 64b14077df49b3da679941c63fcc4efa27c966faa071adb7cadc6bc44f87911a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-52342 Malicious code in ocha-nasisayur55-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c0f16a165184be8765b9869053feb74a88fcc5bb49ca5ea511199c5c792626ff This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-49955 Malicious code in budi-mie64-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0c3bd10e5af46825afe47d0f0c4f88ad864729b6c1ab47929a7a856e9f7784e8 The package budi-mie64-sluey was found to contain malicious code. This package appears to be part of the tea.xyz token reward campaign that flooded n...

MAL-2025-50876 Malicious code in bambang-botok90-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0a5b5b15348804c37c308aada09303a90c4bc0af3fd8b4f4e2d87f200bb62c66 The package bambang-botok90-breki was found to contain malicious code. This package appears to be part of the tea.xyz token reward campaign that...

Malicious code in wibowo-miemee5-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 244eba9996d0a3a3a42d2d1d27aa1c72c53bced2bd331ea2f71e243a54514e4e The package wibowo-miemee5-riris was found to contain malicious code. This package appears to be part of the tea.xyz token reward campaign that flood...

Malicious code in meta-service-boost-90s (npm)

--- -= Per source details. Do not edit below this line.=-...

Malicious Package

Overview park-boost-v1 is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...

Malicious code in park-boost-v1 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware aa4995e481e7e195eba9f71a64e7cfddf3fbcb8004d9eda6edb78c022875441f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...