MAL-2025-59405 Malicious code in wati-rangginang65-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 67073881d928a2c4bc14de7d199a9b7663d5407cfe4b9c7fce5ac5f8d5c3cb0b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-58596 Malicious code in sari-ketan7-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0ff2ee7e0f4ed1545ea83e019d5916c05edcfcfa3291ca3815238b9b0ac914da This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-58064 Malicious code in oktafian-martabak46-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4cd3d1acb7ee232e8929600b85587cf4e7563e46bc76a2dda81fd7ab70b7c0a8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-56917 Malicious code in iwan-jus27-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0651483a63f2f3947ce5961513125bccd5c04ab39171ececb1f45cb1b233b2ab This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-59515 Malicious code in wibowo-otak-otak93-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e68438685b7a11e0f9fb9711e6c3c87e9e84bf1713df60b674fd80f8a7f6db42 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-58457 Malicious code in rifqi-telur71-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6437071decddc9171a6ecd99ae8e2667c8f18d08230b163117375260b4cf1ad0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-56954 Malicious code in jaja-dodol36-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1668845b0c53177ace7ae4461ac4afd8014d6d65c3ecfc3ee0ab8d6eb6571725 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-56664 Malicious code in hanafi-donat64-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 378fc7b5aa537b2fe37fa1b7b1abfb92f7b45f8b9b33ecbe67f29aef7043f270 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-57704 Malicious code in nadia-brongkos78-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1459ce06ff79588015ce8959dd02e0f28ebcab39c71e52be652d70b35f148814 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-56628 Malicious code in hadianto-kacang22-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2e07d0c6f60155e900e13aedb3727dfc0ba2dc629a1eeefacf380680b08c322a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-57895 Malicious code in nurul-rendang33-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 789b0d5da0e8693e9ea832abe2336770c00d3e33d85b9d270e4127e5565e804b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-55723 Malicious code in conventional_mammal_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d948f59c3465997390c8c2660a63acb95fc8ffaceb58270870a891607dfcb8c9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-58475 Malicious code in rina-kepok77-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7cf0329e52fb643aaebe7c4740cdd3c73ebc95ec643f0c7b1753dea80f4b6354 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious Package

Overview karemv1 is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package authorship...

Malicious Package

Overview reactjs-fabric is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...

Malicious Package

Overview web-vitals-help is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...

Malicious Package

Overview @mts-ds/icons is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...

Malicious Package

Overview groupstrap is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package authorship...

MAL-2025-54887 Malicious code in sinta-tek2-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d2364877c93e219df5a4d1ba122cc0e1ef2fb5e6444a0e52deece758981e0821 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in siska-soto16-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b79bc48634f164ba419a987731338eafa51f6516f5a9e80d4cad830597765186 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...