Malicious Package

Overview alivetoad-gooddev is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...

MAL-2025-99349 Malicious code in alive_toad-gooddev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 35a1035d47a2aae2231c73f2095b1e0ffa9afcc1ab60d619e84b272e57c1ff43 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...