Malicious code in nadia-lumpur96-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 11f30233872b3668527af97f14850b984dd3327d887b0074b510a8422f84e7a9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-54521 Malicious code in qori-sego86-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6ff39600efb12108f9485b172b0fdb5ebeefe8aa39917aec513237d6e7a40f43 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-53785 Malicious code in iwan-rangi43-kyuki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c4f6d5bd0665d781727e7d40dea959ec9771095f9bb396892b78d3982c56f008 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hendra-bakso19-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e3966149162e4e564fa63cb87debef34aac3a3559b7d50c321deec8488dcc7aa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-52046 Malicious code in hanafi-rujaksoto91-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0a5fe829a299d9ee63298a7ce7ccf5dd5aadab7848630d3dcacd3c9d2973e5b7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mulyono-rangginang55-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cd8aff45a07b0b088e74643fde0a3ee5f3514e41dfa588f78ac32fd64f161a6a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-53233 Malicious code in laila-peyek84-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0e5321d219a2da33254f822f4e3c2edf2b31e5840834e4fe25bc3885dc915127 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kiki-keraktelor36-kyuki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3337d88d25a4a938d1d950e58f777ce1f4296fb8fe981ea894357b726b95f35b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious Package

Overview cursor-bypass is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...

Malicious Package

Overview react-icons-toolkit is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...

Hidden Logic Bombs in Malware-Laced NuGet Packages Set to Detonate Years After Installation

A set of nine malicious NuGet packages has been identified as capable of dropping time-delayed payloads to sabotage database operations and corrupt industrial control systems. According to software supply chain security company Socket, the packages were published in 2023 and 2024 by a user named...

CVE-2025-56232

GOG Galaxy 2.0.0.2 suffers from Missing SSL Certificate Validation. An attacker who controls the local network, DNS, or a proxy can perform a man-in-the-middle MitM attack to intercept update requests and replace installer or update packages with malicious files...

Malicious Package

Overview react-ui-animates is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...

Malicious Package

Overview airbnb-base-typescript-prettier is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and th...

Malicious Package

Overview @gitlab-test/npm-v10 is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...

Malicious Package

Overview mdx-linter-devdocs is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...

Malicious Package

Overview naftis is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package authorship...

Malicious Package

Overview cloud-data is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package authorship...

Malicious Package

Overview ews-paze-toolkit is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...

Malicious Package

Overview monzo-com is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package authorship...