Malicious Package

Overview react-dom-bindings is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...

Malicious Package

Overview chia-gaming-lobby-connection is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this...

Malicious code in gemini-postgres-rehype-sagitta (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 835234f600dc962131b0c036e7163ad52a55b2eff7514f87441427dbc9a88dae This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188045 Malicious code in mineralogy-less-loader-dagda-global (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 41fbc434baab71cebe5e906d04c5ff50a207494effd4d14116cd4d21e7df57ed This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188657 Malicious code in phenomic-paleoclimatology-slidev-websockets (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 279c8e17a716179e47c018d674da33af1505e188e89645680d467ba11d2917a0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in astam-ifit-dabtazai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ad14d71565d5c52a364c64a455538124bbc4dfef36319d03c819e5041e55bd9d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-184757 Malicious code in one-kat-ibuffdaca (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3a1bfeaaed82168490f5295989a273f0c852935a05417bd1c6020b29285bc8c1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-184529 Malicious code in mokok-lukai-haj (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2f5555c00a805ac591545ac8ff8e184d987f5e9aa40a08d0a852f92f25b5eb30 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in teate-thy-sonic-enewiw (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c6476e70fe779379f0cef8b4997e6c37537555d44e9e4168f770817d620cc226 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-181037 Malicious code in teate-thy-sonic-vaskeh (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 01e6f921f70709e66138673be436b42a179e7b5df0d816ff66fade264a8a8e22 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in joee-banut-imubuir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 61dcd491545d0f2260dc21363b5891c74bde98f8fc423a2353cf2b9eb2fc54e1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nuyar-da-radatdado (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4d91881b969f003843d2a6a3f931314b72c567bb86eda773b024575199302fe4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nuilva-vmiam-as (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6d0d499c027cc9cd1af799247a6980bcb608b3d0f24e7598dda2646314453d6c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in miftah-mipta12 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a9bd7785c84fbe79147be2f606bab5a1dfd83189af19dcbbbcc5a52fcc6283fd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-175611 Malicious code in ksai-kaisom-oloma (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 952b1e39af40a8eea2ac59deacb492feb123c3923606a59909836a83a0462045 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-175511 Malicious code in kiki-poke4 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 00765f7ab2724112153382b8ba4dac20c399ffba852c90d1be4f63aea50c9815 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-178933 Malicious code in teagod-rich15 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b72e7db7e56f32b9ffceba131fec8ba03f6e09fc379332cb10e16c7ec7aad2b1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-173534 Malicious code in butahu-asfui-dspifh (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cd4afde591a1bbb67bd7470a6ed3ed110c9e7432d6e9fb5585443e1e7b72557b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in bintang-tea24 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a0b22f4fa2f6379d9076b99703b863b55d00258a3936b5dd446a141bd37055d1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nuilava-dakaogfrae-nffahaha (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 298a18697a04d1f84e259570d5ed5f38d4e14368ea6813287fa271a4aeac5c5d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...