Malicious code in siska-gembus49-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e5f6ad97907b6c0558c865bc8b6cbbbd79d7f9b201425043ee2d398ad4a596f3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-54983 Malicious code in surya-lepet40-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 115f7681bee81ff53f1f2e565d7946a4026730d81320139da13265f2b0c1d6d0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hendra-nasisayur64-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 28f4be9a1ac2016c5700b2a99d40422cfb479e673396c1618117a1774b251f05 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-50183 Malicious code in dewanto-gudeg1-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6c16e12dcc770476fc872df479439ad4ad7773b10177a2e8446370812e6af54d The package dewanto-gudeg1-riris was found to contain malicious code. This package appears to be part of the tea.xyz token reward campaign that flood...

MAL-2025-50327 Malicious code in erick-mangut23-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 12261306ae7760f92a1ec99da157bcabafcaf041d2f0261fddd1e8c93aa63be6 The package erick-mangut23-miaww was found to contain malicious code. This package appears to be part of the tea.xyz token reward campaign that flood...

MAL-2025-51668 Malicious code in eko-keripik22-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d588ac927f55cbf671977c31b7d94298cfcd7f0c0c1b4fbd0cb50b60c55319bc The package eko-keripik22-sluey was found to contain malicious code. This package appears to be part of the tea.xyz token reward campaign that floode...

Malicious Package

Overview xo-form-components is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...

Malicious Package

Overview firefly-sdk-js is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...

Malicious Package

Overview transform-react-constant-elements is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and...

Malicious Package

Overview mocha-no-only is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...

Malicious Package

Overview tailwind-config-view is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...

Malicious Package

Overview cloak-withdraw-proofs is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...

Malicious Package

Overview @wangeditoreditor/editor is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this...

Malicious Package

Overview gets-random-datas is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...

Malicious Package

Overview ninjaleetpkg is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...

Malicious Package

Overview eslint-config-jest is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...

Malicious Package

Overview internal-checkout-bricks is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this...

Malicious Package

Overview redirect-xgcv6j is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...

Malicious Package

Overview @testcarrot/supply10 is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...

Malicious Package

Overview @testcarrot/supply1 is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...