Malicious Package

Overview ilovefemboys is a malicious package. This package is part of a malicious npm campaign that abused the registry to distribute ad-supported web proxy applications disguised as educational websites. The package contains web assets intended to bypass network restrictions and generate...

ruby: SMTP command injection via CRLF sequences in RCPT TO or MAIL FROM commands in Net::SMTP

A SMTP command injection flaw was found in the way Ruby's Net::SMTP module handled CRLF sequences in certain SMTP commands. An attacker could potentially use this flaw to inject SMTP commands in a SMTP session in order to facilitate phishing attacks or spam campaigns...

Malicious code in tray-pazap-paoim (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 00fef30279b3ca07eede2614f1d1afb20c88c16c1e36d00b1bcff522137fd496 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-126272 Malicious code in erwin-rangi18-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b95f878dc1c538d715d6c1afc03769149d1da77b8e2220201faf43fc9c96539a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in andi-bakwan91-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 053b2ee902025463cd2170585c96851a4447d78031152fab5e60439cecf9266f The package andi-bakwan91-riris was found to contain malicious code. This package appears to be part of the tea.xyz token reward campaign that floode...

Malicious code in andi-nasi47-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 775880ce13e2f6d0200bef297680ca2337945f731c3f57d544e1d14a73ad4667 The package andi-nasi47-sluey was found to contain malicious code. This package appears to be part of the tea.xyz token reward campaign that flooded...

Malicious code in bella-getuk24-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 70f98bc9c1d650494886cc5b093ec55d255dca32d38e5aebdaf90849e9424d5b The package bella-getuk24-ruro was found to contain malicious code. This package appears to be part of the tea.xyz token reward campaign that flooded...

Malicious code in budi-martabak61-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0ab5442962472f1c076d27912ec25fb2bb65c6b2f746e04b5f4d92fa609039f7 The package budi-martabak61-breki was found to contain malicious code. This package appears to be part of the tea.xyz token reward campaign that...

Malicious code in budi-soto7-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b8c274d8471b2b296c9c5a7694c2a4d46b2c66fc4d5b683541c1966a259a9042 The package budi-soto7-riris was found to contain malicious code. This package appears to be part of the tea.xyz token reward campaign that flooded n...

Malicious code in budi-tahu55-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fe05a69bfc58f0fe6aa8b589bd8e226d5a0069e80b4bd33582f09139a168ea24 The package budi-tahu55-sukiwir was found to contain malicious code. This package appears to be part of the tea.xyz token reward campaign that floode...

Malicious code in budi-telur21-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f4be3b449ca28fa909f1ee0e59e9defdb8d90c80d70a60467a0d8c9703650ecd The package budi-telur21-sluey was found to contain malicious code. This package appears to be part of the tea.xyz token reward campaign that flooded...

Malicious code in candra-ketan59-sumpek (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector eaf0549544078cc1e9febc2411a7f9b6be8b0fa48a45724872e20f06b52ac681 The package candra-ketan59-sumpek was found to contain malicious code. This package appears to be part of the tea.xyz token reward campaign that...

Malicious code in candra-lengko4-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b640e95942b0a028eb5a6b76b28845de730bf6794f450493d4bd760398a61f88 The package candra-lengko4-sluey was found to contain malicious code. This package appears to be part of the tea.xyz token reward campaign that flood...

Malicious code in candra-liwet89-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector eeef79a7e90f98af6c4901ea83a19951b5fcc50b0365550bdb622fd4358995a6 The package candra-liwet89-riris was found to contain malicious code. This package appears to be part of the tea.xyz token reward campaign that flood...

Malicious code in cindy-miebogor39-tititugel (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9947a6b27e2d593dc5db278b7e3215a17495d74b3a1ab7d7ea9fb9d525de40d8 The package cindy-miebogor39-tititugel was found to contain malicious code. This package appears to be part of the tea.xyz token reward campaign that...

Malicious code in citra-papeda89-pore (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fd6aff7e511ac2fd578ecae0f15628256fbc81bbb3de4f884c943898ec8c948b The package citra-papeda89-pore was found to contain malicious code. This package appears to be part of the tea.xyz token reward campaign that floode...

Malicious code in citra-serimuka98-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 612221655aa7cac17906503b58acc09cac0c9c12eb55f40aa17dca8b82ff36ee The package citra-serimuka98-sukiwir was found to contain malicious code. This package appears to be part of the tea.xyz token reward campaign that...

Malicious code in citra-tahu82-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4c21d39325139a42e794f810b103df5f5ceee429dc64f19fc886c92c47fd8bcf The package citra-tahu82-riris was found to contain malicious code. This package appears to be part of the tea.xyz token reward campaign that flooded...

Malicious code in citra-telur85-remi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d7206e13f15e35cfed242a80e5a64d7caac21ee445eee809fa42b1dfebae3058 The package citra-telur85-remi was found to contain malicious code. This package appears to be part of the tea.xyz token reward campaign that flooded...

Malicious code in citra-wajit6-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6c9d84bac4a53023f00e589eee5409b1b835b22ce1778fcd0807741af445a697 The package citra-wajit6-sukiwir was found to contain malicious code. This package appears to be part of the tea.xyz token reward campaign that flood...