Malicious code in ida-naget41-sukiwir (npm)

The package ida-naget41-sukiwir was found to contain malicious code. --- Credit: OpenSSF source...

Malicious code in ida-mendut13-breki (npm)

Source: amazon-inspector 7b344f26ef0841529591f7462b0f951ba8102f26b9cf3a084ee5397c9b802138 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

Malicious code in ida-menjes17-kyuki (npm)

The package ida-menjes17-kyuki was found to contain malicious code. --- Credit: OpenSSF source...

Malicious code in ida-lapis56-breki (npm)

The package ida-lapis56-breki was found to contain malicious code. --- Credit: OpenSSF source...

Malicious code in ida-liwet15-kyuki (npm)

The package ida-liwet15-kyuki was found to contain malicious code. --- Credit: OpenSSF source...

Malicious code in ida-kue30-miaww (npm)

Source: amazon-inspector 345cfa9d8f37f9ce79784ad7e38cb2af46d33a5fb09de76eda5790ca69b2c1a9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

Malicious code in ida-kue29-breki (npm)

The package ida-kue29-breki was found to contain malicious code. --- Credit: OpenSSF source...

Malicious code in ida-kolak98-miaww (npm)

Source: amazon-inspector bf4b56f32b9d3e4dabe52db9321c9af3c6581b3b8e5f2e7a9dca1f21d0adf35e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

Malicious code in ida-kolak84-kyuki (npm)

The package ida-kolak84-kyuki was found to contain malicious code. --- Credit: OpenSSF source...

Malicious code in ida-jamblang93-miaww (npm)

Source: amazon-inspector eed3f9b333ce5526c3ce1c401fab41023863aa202c1d6431fefb0ce12631193f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

Malicious code in ida-gandul38-sluey (npm)

Source: amazon-inspector ed5e1010c1a66bff0567b798c7dbfc9587b5ca3a0578e52f99f47b0fb6e43edc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

MAL-2026-16143 Malicious code in chroma-client (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f0c415e6cd4e653006225dd54672dd79ef076166a2015fa33bbf8f10b789af55 The distribution installs a.pth file that Python auto-executes at interpreter startup on every process using the environment. The.pth file's executab...

Malicious code in ida-enting60-sukiwir (npm)

The package ida-enting60-sukiwir was found to contain malicious code. --- Credit: OpenSSF source...

Malicious code in ida-dodol60-breki (npm)

Source: amazon-inspector ce3bf9eba648d337a28b0b4d10bc56584d5e110f1757123abd873e8e0f2bb0c1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

Malicious code in ida-dodol25-breki (npm)

The package ida-dodol25-breki was found to contain malicious code. --- Credit: OpenSSF source...

Malicious code in ida-dodol92-riris (npm)

Source: amazon-inspector 2709d3919650cf16c8e70128941f50ce67b2e3d12b5a7932b960d07c58f70a8a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

Malicious code in ida-bakwan96-riris (npm)

Source: amazon-inspector 5b40624714ae85f8b4869060f60bc50f443de4e0f3a08f0c0e01166ff8566c1e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

Malicious code in id-cookies (npm)

The package id-cookies was found to contain malicious code. --- Credit: OpenSSF source...

Malicious code in ida-bakso42-breki (npm)

The package ida-bakso42-breki was found to contain malicious code. --- Credit: OpenSSF source...

Malicious code in iconicwp-website (npm)

Source: amazon-inspector 54a461f0dd6ebd5aebcbb0836c385b1c112e8af98e946b8002a7f9db0c408dff The package iconicwp-website was found to contain malicious code. --- Credit: OpenSSF source...