Malicious code in hapi-csv-zenobia-xanadu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4356fae40d4893d8d4c9ab69e759b5bd78aaefd6a7b8e0a47d60c7a2eb1ccdca This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145948 Malicious code in parcel-async-ophiuchus-ganymede (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 89f6372ad132250ecbeb525e54adf13c404c2ecbfdb13bc67991250bf8c0b04b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146653 Malicious code in promise-uglify-js-chalk-sagitta (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d217294d5c2c2e64d732a8ea1fc726b9a504ae3f6a023ec18b1f4fe46edc6187 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ocha-oblok56-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ee47bdab2853fe35f6716ffb4a680f5ae7779b3eaccd70d6bf5690204d002d70 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in vina-naget60-sumpek (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f0df5a393b8eaafd8158a2de895db5ae2bde61d385554b648c823be3d79e23dd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ltd_leopon_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cdd6225ca83975e7f2092b5ef2a056dfc06eff0b4b385eb61c6bf1b5ceb9bce3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in bayu-ongol-ongol71-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cbc88b2e0bfd8d29e408281df06a970527c661e76b1b208dd93212b8089b7165 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-101200 Malicious code in dangerous_anglerfish_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4040f5b10ea0b7cd3a46afa5c8edf93462f8ce24773250101c98353b1c8e7ff0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mathematical_egret_dumbs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c3c721a6ee4ec469529816cabb755f10fa452533ed30227bf4abe02015f2814b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-100427 Malicious code in cici-klentik61-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c2965c61460bcd03101ba0e0c9d1d16483f67fe1457f2a21cd3ff894cff85d78 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-88149 Malicious code in mahesa-lutis61-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c068f70fb6c79fd0273e3edf18707762a2a85ed1008c04ecfdb8ed5876ec6336 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mulyono-gudeg64-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3ceafb2b0768a868b92ee435dc41d84aefef0008204d19b4db60dd23c4523016 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-81534 Malicious code in surya-mangut43-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 26ba9071707d6579f98a7986f0b0f8d92b5e66b7ea697079cb58ff79d7b44d06 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in amateur-emerald-weasel (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bfc2621858e11d12c9bb8619ecccef4077a0d93b1ad0f8231c9464333cdf0c73 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68389 Malicious code in formal-fuchsia-gayal (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4cd95c8a46e6b9c1e56f941e829b4635cd131c24c780f6989a808d6a1e343910 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69118 Malicious code in lesser-turquoise-panda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 975e41ce985e02974fbc00a6671cefe7fcb8972a7b5e75d385613da6ced25311 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hadi-gepuk54-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1d174916b8b2cd97f94333a44378bd8db7dc53ae49491ac443d567ae2c13d1ff This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tomi-sroto22-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fe2d43adca76572a47e76ab1e9fd7a3a7e4edf4dd95ec13ad0868e8a98284546 The package tomi-sroto22-ruro was found to contain malicious code. This package appears to be part of the tea.xyz token reward campaign that flooded...

Malicious Package

Overview rbx-reader-ts is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...

Malicious Package

Overview kubeflow is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package authorship...