Malicious Package

Overview ilovefemboys is a malicious package. This package is part of a malicious npm campaign that abused the registry to distribute ad-supported web proxy applications disguised as educational websites. The package contains web assets intended to bypass network restrictions and generate...

ruby: SMTP command injection via CRLF sequences in RCPT TO or MAIL FROM commands in Net::SMTP

A SMTP command injection flaw was found in the way Ruby's Net::SMTP module handled CRLF sequences in certain SMTP commands. An attacker could potentially use this flaw to inject SMTP commands in a SMTP session in order to facilitate phishing attacks or spam campaigns...

Malicious code in tray-pazap-paoim (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 00fef30279b3ca07eede2614f1d1afb20c88c16c1e36d00b1bcff522137fd496 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-126272 Malicious code in erwin-rangi18-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b95f878dc1c538d715d6c1afc03769149d1da77b8e2220201faf43fc9c96539a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tania-soto61-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector edfe0f6b483d022af5f472d9b66194d4978a548a14bc3d8987b6515859cf449c The package tania-soto61-sukiwir was found to contain malicious code. This package appears to be part of the tea.xyz token reward campaign that flood...

Malicious code in umi-kolak21-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4b123f0354c79e40fab47f329a7b4c48bf29a304a44896b9002ca034e6cb4cbb The package umi-kolak21-miaww was found to contain malicious code. This package appears to be part of the tea.xyz token reward campaign that flooded...

Malicious code in tania-sego43-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 289b07a632e8445797c8c19ebc0dc3710698c029545a2da22f01c859db0f5bf5 The package tania-sego43-riris was found to contain malicious code. This package appears to be part of the tea.xyz token reward campaign that flooded...

Malicious code in bayu-tahu31-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1576cc3f8c3f44407e3510c117043ccfcad8530d6353569618c68c61ddc5e613 The package bayu-tahu31-breki was found to contain malicious code. This package appears to be part of the tea.xyz token reward campaign that flooded...

Malicious code in budi-martabak61-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0ab5442962472f1c076d27912ec25fb2bb65c6b2f746e04b5f4d92fa609039f7 The package budi-martabak61-breki was found to contain malicious code. This package appears to be part of the tea.xyz token reward campaign that...

Malicious code in dian-mangut70-wekto (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6ad0655196e8ec0865d3c77030f5ab9b8a10d05bffc7a9680a4ca77a1b54e702 The package dian-mangut70-wekto was found to contain malicious code. This package appears to be part of the tea.xyz token reward campaign that floode...

Malicious code in umi-sambel75-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a22ca147939ab545cc2c75dd206b8bb37e3c4eeddcdcefc0386d841373fa7ff4 The package umi-sambel75-breki was found to contain malicious code. This package appears to be part of the tea.xyz token reward campaign that flooded...

Malicious code in dewanto-pecel49-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3727fbdba5b6a2177fb2a85b20c0963f94740328f5d3daaca0620da633c6e012 The package dewanto-pecel49-breki was found to contain malicious code. This package appears to be part of the tea.xyz token reward campaign that...

Malicious code in candra-tapai46-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 39e4c8fb59104deb1853243e2882f8c6dc76df5365f5a2231cdea0b4daf85001 The package candra-tapai46-sukiwir was found to contain malicious code. This package appears to be part of the tea.xyz token reward campaign that...

Malicious code in dewi-otak-otak39-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ab4e71d58f358cafc93233270e818a1222c0a5636c7769424f19ace7e368c040 The package dewi-otak-otak39-sluey was found to contain malicious code. This package appears to be part of the tea.xyz token reward campaign that...

Malicious code in eka-rujak80-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 50e1826f8c32e25a41be9ebdcdffa387a88791ea85777da04bf6bb712ac4c50c The package eka-rujak80-sukiwir was found to contain malicious code. This package appears to be part of the tea.xyz token reward campaign that floode...

Malicious code in fitri-lapis50-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 42945b901753747a076545611c6c459c49f62b8441787d7197cf001e24432262 The package fitri-lapis50-ruro was found to contain malicious code. This package appears to be part of the tea.xyz token reward campaign that flooded...

Malicious code in tuti-martabak70-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d583b314745ae58b0736b7eadf37c2b10fdcc898eba9c746b95cae14e9e8a1c1 The package tuti-martabak70-ruro was found to contain malicious code. This package appears to be part of the tea.xyz token reward campaign that flood...

MAL-2025-52538 Malicious code in umi-bubursumsum33-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7b985ea8e4cae8ab2949466dd75a8e834a54bdf562c6769e540ad997bd731ee8 The package umi-bubursumsum33-miaww was found to contain malicious code. This package appears to be part of the tea.xyz token reward campaign that...

Malicious code in tuti-rojak6-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 21d4c01d88e1d0209df419fa7651302ff6b3da91ae4a873c07a080a0f6947a22 The package tuti-rojak6-miaww was found to contain malicious code. This package appears to be part of the tea.xyz token reward campaign that flooded...

Malicious code in cici-kue51-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 716b26bcd853945d36b39a258091259dde874930ebc799ef9a60a57c2927af4d The package cici-kue51-sluey was found to contain malicious code. This package appears to be part of the tea.xyz token reward campaign that flooded n...