Malicious Package

Overview ilovefemboys is a malicious package. This package is part of a malicious npm campaign that abused the registry to distribute ad-supported web proxy applications disguised as educational websites. The package contains web assets intended to bypass network restrictions and generate...

ruby: SMTP command injection via CRLF sequences in RCPT TO or MAIL FROM commands in Net::SMTP

A SMTP command injection flaw was found in the way Ruby's Net::SMTP module handled CRLF sequences in certain SMTP commands. An attacker could potentially use this flaw to inject SMTP commands in a SMTP session in order to facilitate phishing attacks or spam campaigns...

Malicious code in tray-pazap-paoim (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 00fef30279b3ca07eede2614f1d1afb20c88c16c1e36d00b1bcff522137fd496 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-126272 Malicious code in erwin-rangi18-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b95f878dc1c538d715d6c1afc03769149d1da77b8e2220201faf43fc9c96539a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in budi-soto7-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b8c274d8471b2b296c9c5a7694c2a4d46b2c66fc4d5b683541c1966a259a9042 The package budi-soto7-riris was found to contain malicious code. This package appears to be part of the tea.xyz token reward campaign that flooded n...

Malicious code in candra-ubi24-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3cff91429ffb0b827933c9fb453c392fe7d4321f0a7d948a7a5a9c5ceffb9b21 The package candra-ubi24-sluey was found to contain malicious code. This package appears to be part of the tea.xyz token reward campaign that flooded...

Malicious code in bella-miemee34-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5e5381f16b4df602ad6327bb6fd2549707ac0a463bd123965bb7709649e49080 The package bella-miemee34-breki was found to contain malicious code. This package appears to be part of the tea.xyz token reward campaign that flood...

Malicious code in budi-tahu55-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fe05a69bfc58f0fe6aa8b589bd8e226d5a0069e80b4bd33582f09139a168ea24 The package budi-tahu55-sukiwir was found to contain malicious code. This package appears to be part of the tea.xyz token reward campaign that floode...

Malicious code in cici-bubur88-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6225d0d460864e39b60711f8a8eaabfec502d3a5ed3a0e1f4933d46dd454f28e The package cici-bubur88-breki was found to contain malicious code. This package appears to be part of the tea.xyz token reward campaign that flooded...

Malicious code in vida-papeda14-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 31e35d34c475bc926f1a903185eb203cb248c2cfca77465fcf223cd36ca5e939 The package vida-papeda14-riris was found to contain malicious code. This package appears to be part of the tea.xyz token reward campaign that floode...

Malicious code in cindy-sate25-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b380cb48cee75737c08ef5c8ce6761b98fb75e16a77434365c160cdaff06ca3a The package cindy-sate25-sukiwir was found to contain malicious code. This package appears to be part of the tea.xyz token reward campaign that flood...

Malicious code in dewanto-pecel49-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3727fbdba5b6a2177fb2a85b20c0963f94740328f5d3daaca0620da633c6e012 The package dewanto-pecel49-breki was found to contain malicious code. This package appears to be part of the tea.xyz token reward campaign that...

Malicious code in fajar-rujak91-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 35ec1b0cf82df7f6871893544985cf6831fed6617ed308380a218637cf2b88ca The package fajar-rujak91-sukiwir was found to contain malicious code. This package appears to be part of the tea.xyz token reward campaign that...

Malicious code in tania-telurtahu3-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b101cbe0f9e64c42fef2cac69e19a83708002846d7b88acbb5a9913f14d72b7e The package tania-telurtahu3-riris was found to contain malicious code. This package appears to be part of the tea.xyz token reward campaign that...

Malicious code in tuti-rojak6-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 21d4c01d88e1d0209df419fa7651302ff6b3da91ae4a873c07a080a0f6947a22 The package tuti-rojak6-miaww was found to contain malicious code. This package appears to be part of the tea.xyz token reward campaign that flooded...

Malicious code in bayu-tahu31-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1576cc3f8c3f44407e3510c117043ccfcad8530d6353569618c68c61ddc5e613 The package bayu-tahu31-breki was found to contain malicious code. This package appears to be part of the tea.xyz token reward campaign that flooded...

Malicious code in umi-jamblang99-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2d4b69e30d9c0d6f60711aad99c5f8cf52132dd71ad1c721d9ccd4b09f069c9d The package umi-jamblang99-breki was found to contain malicious code. This package appears to be part of the tea.xyz token reward campaign that flood...

Malicious code in arif-wajit69-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c9b654af1d1f37e0c538ad88fe1aa8218bc84a2f96512bc4a53bc93c4fe4d438 The package arif-wajit69-riris was found to contain malicious code. This package appears to be part of the tea.xyz token reward campaign that flooded...

Malicious code in eka-rujak80-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 50e1826f8c32e25a41be9ebdcdffa387a88791ea85777da04bf6bb712ac4c50c The package eka-rujak80-sukiwir was found to contain malicious code. This package appears to be part of the tea.xyz token reward campaign that floode...

Malicious code in gilang-peyek66-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 130e6fff51bdaf20d883209d09d359bb6648bb0695ae5f01ffb6d15267107705 The package gilang-peyek66-sluey was found to contain malicious code. This package appears to be part of the tea.xyz token reward campaign that flood...