Malicious Package

Overview initial-path is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...

"To Survive, I Must Defect": Jailbreaking LLMs Via the Game-Theory Scenarios

As LLMs become more common, non-expert users can pose risks, prompting extensive research into jailbreak attacks. However, most existing black-box jailbreak attacks rely on hand-crafted heuristics or narrow search spaces, which limit scalability. Compared with prior attacks, we propose Game-Theor...

Malicious code in uyifiua-tut-da (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 81520b4ac758ea8cd6c0abdf77fa823e36fd11ddbb85ed21117baad312470153 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-164760 Malicious code in rinto-poke107 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 05e89a5f3483fc7791d933594c516e77a1e6fce3094b02ad7b2aa069883a7dcd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sabua-muyafig-budafauaffu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 571b0c4777b12e0ee5833f3dc3970eead5ecd2bda6ec892390b044e93a06a000 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-151791 Malicious code in aiboa-milipe-apamumpa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 511dd511ec27f0d1e2882ea6ccf5e1b8922813793a2794e2f8ef3516b9fcb649 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146653 Malicious code in promise-uglify-js-chalk-sagitta (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d217294d5c2c2e64d732a8ea1fc726b9a504ae3f6a023ec18b1f4fe46edc6187 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145948 Malicious code in parcel-async-ophiuchus-ganymede (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 89f6372ad132250ecbeb525e54adf13c404c2ecbfdb13bc67991250bf8c0b04b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hapi-csv-zenobia-xanadu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4356fae40d4893d8d4c9ab69e759b5bd78aaefd6a7b8e0a47d60c7a2eb1ccdca This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in vega-chariklo-oberon-scripts (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e097682e36630b237386c15288de031a936baf46e72c3942302e068560fcf01d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mocha-geckodriver-lint-pino (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 84c1c9512158808bf67bb2fec6b55841817afc76f0e0dda0e78ea73460944525 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in farout-supervisor-phoebe-umbra (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7f7f56182fb0508ccdcfa89d6395ddf24d4f32bb251f2ace9a58c29d899b8d89 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in vina-naget60-sumpek (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f0df5a393b8eaafd8158a2de895db5ae2bde61d385554b648c823be3d79e23dd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ocha-oblok56-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ee47bdab2853fe35f6716ffb4a680f5ae7779b3eaccd70d6bf5690204d002d70 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ltd_leopon_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cdd6225ca83975e7f2092b5ef2a056dfc06eff0b4b385eb61c6bf1b5ceb9bce3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in bayu-ongol-ongol71-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cbc88b2e0bfd8d29e408281df06a970527c661e76b1b208dd93212b8089b7165 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-101200 Malicious code in dangerous_anglerfish_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4040f5b10ea0b7cd3a46afa5c8edf93462f8ce24773250101c98353b1c8e7ff0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mathematical_egret_dumbs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c3c721a6ee4ec469529816cabb755f10fa452533ed30227bf4abe02015f2814b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-100427 Malicious code in cici-klentik61-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c2965c61460bcd03101ba0e0c9d1d16483f67fe1457f2a21cd3ff894cff85d78 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-88149 Malicious code in mahesa-lutis61-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c068f70fb6c79fd0273e3edf18707762a2a85ed1008c04ecfdb8ed5876ec6336 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...