MAL-2025-181648 Malicious code in astam-ift-dabbamikk (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 30425507d63b2c919911edd9e4d89b90b6fd17aea4691f53b963b317f6510c99 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hereis-manic-tauwaranaj (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8d261a901fe909539938c6a96e3df6f45a40bf5fdce3aa5d640cafa5d925110b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious Package

Overview 4meme-readable-stream is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...

MAL-2025-129166 Malicious code in okta-lengko26-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a2086ec57ddf6de37a1a44dba05a8ac58c360251b65f89b5efe750eccc1bac2b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-130951 Malicious code in valid_guineafowl_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 81da29610d0ada6f2de81c80c4bfc2ff9e06812c9aa9d68b3ffb3aa3f1192326 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-115009 Malicious code in joko-bubur69-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dd120b9817afcf3caf4efbd4dc1e1f6624595533a7bca4b076e8e15a3a12faa3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in secure_gull-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3a9bf74f6aa7c0bae23c8e79d46a301009bf02722610fb01b093f4bb94c761c9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in subjective_wasp_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a0b7bec969ea252d7fc43291688d7efb5b41dfd9cf98d2de18272dd10cf91084 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-81116 Malicious code in rina-soto77-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 82d3ffee133a1aaaaae8bfc259f15c39eaae6f1906f6d821033631962eaa12ea This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious Package

Overview supports-validation-checkerlib is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and thi...

Malicious Package

Overview grumpy-squidward is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...

Malicious Package

Overview npmtestchenguang is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...

Malicious Package

Overview @walletwave/ui is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...

Malicious Package

Overview read-async is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package authorship...

Malicious Package

Overview karemv1 is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package authorship...

Malicious Package

Overview reactjs-fabric is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...

Malicious Package

Overview web-vitals-help is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...

Malicious Package

Overview graphhub is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package authorship...

MAL-2025-53239 Malicious code in laila-saguer51-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9f48cdbca2b062257b013d8bda160b1937f164e43ad5c9296702a1df02c87b62 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious Package

Overview telegram-travis-api is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...