MAL-2025-81534 Malicious code in surya-mangut43-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 26ba9071707d6579f98a7986f0b0f8d92b5e66b7ea697079cb58ff79d7b44d06 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mulyono-gudeg64-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3ceafb2b0768a868b92ee435dc41d84aefef0008204d19b4db60dd23c4523016 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in amateur-emerald-weasel (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bfc2621858e11d12c9bb8619ecccef4077a0d93b1ad0f8231c9464333cdf0c73 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68389 Malicious code in formal-fuchsia-gayal (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4cd95c8a46e6b9c1e56f941e829b4635cd131c24c780f6989a808d6a1e343910 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69118 Malicious code in lesser-turquoise-panda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 975e41ce985e02974fbc00a6671cefe7fcb8972a7b5e75d385613da6ced25311 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hadi-gepuk54-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1d174916b8b2cd97f94333a44378bd8db7dc53ae49491ac443d567ae2c13d1ff This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tomi-sroto22-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fe2d43adca76572a47e76ab1e9fd7a3a7e4edf4dd95ec13ad0868e8a98284546 The package tomi-sroto22-ruro was found to contain malicious code. This package appears to be part of the tea.xyz token reward campaign that flooded...

Malicious Package

Overview rbx-reader-ts is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...

Malicious Package

Overview kubeflow is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package authorship...

Malicious Package

Overview kingasd is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package authorship...

MAL-2025-49310 Malicious code in faker-python (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 2d88bf5533b182da36c514791c3e6841d83565d4d7f7065a09cdebddc2509453 Installing the package or importing the module exfiltrates basic information about the host, and the package has no other purpose. --- Category: PROBABLYPENTES...

Malicious code in sechub-openapi-ts-client (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cbfa8eb5cccd4e8e722c4df1147efab7d4c4084b31710e417b10b87bf1d63267 The package sechub-openapi-ts-client was found to contain malicious code. Source: ghsa-malware...

Malicious code in kubeflow (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3150469110dc3e3086ca34f822bec2df638b48510698b298219a1f7f402680c3 The package kubeflow was found to contain malicious code. Source: ghsa-malware dd99a9b554f60504a7d93b59d2a89050acc67db75c799deeacfa3b33019dd7be Any...

Malicious Package

Overview icon-react-fork is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...

Malicious Package

Overview pixelblm is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package authorship...

Malicious Package

Overview shopifyql-parser is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...

Malicious Package

Overview circleci-docs is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...

Malicious Package

Overview tailwindcss-utility is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...

MAL-2025-49097 Malicious code in int_affirm_controllers (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4c121a8e42740e77bf8fbd68555baf163e58d04b145e5ad42bbc0feb3a087628 The package intaffirmcontrollers was found to contain malicious code. Source: ossf-package-analysis...

Malicious Package

Overview xo-title is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package authorship...