Malicious Package

Overview ilovefemboys is a malicious package. This package is part of a malicious npm campaign that abused the registry to distribute ad-supported web proxy applications disguised as educational websites. The package contains web assets intended to bypass network restrictions and generate...

ruby: SMTP command injection via CRLF sequences in RCPT TO or MAIL FROM commands in Net::SMTP

A SMTP command injection flaw was found in the way Ruby's Net::SMTP module handled CRLF sequences in certain SMTP commands. An attacker could potentially use this flaw to inject SMTP commands in a SMTP session in order to facilitate phishing attacks or spam campaigns...

Malicious code in tray-pazap-paoim (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 00fef30279b3ca07eede2614f1d1afb20c88c16c1e36d00b1bcff522137fd496 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-126272 Malicious code in erwin-rangi18-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b95f878dc1c538d715d6c1afc03769149d1da77b8e2220201faf43fc9c96539a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in bayu-tahu31-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1576cc3f8c3f44407e3510c117043ccfcad8530d6353569618c68c61ddc5e613 The package bayu-tahu31-breki was found to contain malicious code. This package appears to be part of the tea.xyz token reward campaign that flooded...

Malicious code in umi-jamblang99-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2d4b69e30d9c0d6f60711aad99c5f8cf52132dd71ad1c721d9ccd4b09f069c9d The package umi-jamblang99-breki was found to contain malicious code. This package appears to be part of the tea.xyz token reward campaign that flood...

Malicious code in eka-tomat89-sumpek (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9316055e8aac85f2aafdab145f406084277297c4a005769c25dec491fd7c3ff1 The package eka-tomat89-sumpek was found to contain malicious code. This package appears to be part of the tea.xyz token reward campaign that flooded...

Malicious code in arif-wajit69-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c9b654af1d1f37e0c538ad88fe1aa8218bc84a2f96512bc4a53bc93c4fe4d438 The package arif-wajit69-riris was found to contain malicious code. This package appears to be part of the tea.xyz token reward campaign that flooded...

Malicious code in eka-rujak80-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 50e1826f8c32e25a41be9ebdcdffa387a88791ea85777da04bf6bb712ac4c50c The package eka-rujak80-sukiwir was found to contain malicious code. This package appears to be part of the tea.xyz token reward campaign that floode...

Malicious code in bayu-bika75-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f63f907a798ec478f8f91bba688c85e3f3f56015d06eeb42509d1a1eca7a1b78 The package bayu-bika75-miaww was found to contain malicious code. This package appears to be part of the tea.xyz token reward campaign that flooded...

Malicious code in andi-bakwan91-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 053b2ee902025463cd2170585c96851a4447d78031152fab5e60439cecf9266f The package andi-bakwan91-riris was found to contain malicious code. This package appears to be part of the tea.xyz token reward campaign that floode...

Malicious code in budi-bakwan67-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e42a9a203ce9cb37b6f95a2e59f6c3cd64362b25bef24726512e72e06487827c The package budi-bakwan67-riris was found to contain malicious code. This package appears to be part of the tea.xyz token reward campaign that floode...

Malicious code in cici-taiwan47-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 52615930a39db1bae0692d3eb141f7c7eda743b63fed98914922073f8183bf7b The package cici-taiwan47-sluey was found to contain malicious code. This package appears to be part of the tea.xyz token reward campaign that floode...

Malicious code in bella-getuk24-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 70f98bc9c1d650494886cc5b093ec55d255dca32d38e5aebdaf90849e9424d5b The package bella-getuk24-ruro was found to contain malicious code. This package appears to be part of the tea.xyz token reward campaign that flooded...

Malicious code in fitri-enting37-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 371b3437e9763736d40bf837e5eb71c48083c544706fee80dbf5549ef444d828 The package fitri-enting37-ruro was found to contain malicious code. This package appears to be part of the tea.xyz token reward campaign that floode...

Malicious code in dewi-toge36-wekto (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e6a1ab3efb244b94ede2c17a4945e12f795fbd17d5a94a0f4814e20f22c00f04 The package dewi-toge36-wekto was found to contain malicious code. This package appears to be part of the tea.xyz token reward campaign that flooded...

Malicious code in tania-soto61-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector edfe0f6b483d022af5f472d9b66194d4978a548a14bc3d8987b6515859cf449c The package tania-soto61-sukiwir was found to contain malicious code. This package appears to be part of the tea.xyz token reward campaign that flood...

Malicious code in candra-ubi24-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3cff91429ffb0b827933c9fb453c392fe7d4321f0a7d948a7a5a9c5ceffb9b21 The package candra-ubi24-sluey was found to contain malicious code. This package appears to be part of the tea.xyz token reward campaign that flooded...

Malicious code in erick-getas53-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1a77550c81258ef81131258488f2b4a22069680622ee67ac1f4e59fb2b331248 The package erick-getas53-breki was found to contain malicious code. This package appears to be part of the tea.xyz token reward campaign that floode...

Malicious code in dian-kue59-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 996384517636c42777682d9a3c49847391486f7804785d1771dd0e4e9a11ccdb The package dian-kue59-sluey was found to contain malicious code. This package appears to be part of the tea.xyz token reward campaign that flooded n...