Malicious Package

Overview react-confetti-modern is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...

Malicious code in react-confetti-modern (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 97a195b8307abbf7a2b6a5d4bd82b65aaad0891e87788e11d1a934707180631c The package react-confetti-modern was found to contain malicious code. Source: ghsa-malware...

EUVD-2025-179646

Malicious code in command-react-bootstrap-neuromorphic-magellan npm...

EUVD-2025-176963

Malicious code in proxima-farout-react-bootstrap-puppeteer npm...

EUVD-2025-178680

Malicious code in got-nightwatch-despina-react-bootstrap npm...

Malicious code in dione-kastra-public-react-bootstrap (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 94e45af73e65c8bb69b8936ef251a668c188721bb919947f8884f6ae981cf02f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-177482

Malicious code in odin-mensa-magnetar-react-bootstrap npm...

EUVD-2025-179070

Malicious code in eridanus-react-bootstrap-telesto-yaml npm...

MAL-2025-189091 Malicious code in react-bootstrap-nightwatch-levels-command (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 60b4694504f4410dd51f8425128c7f0ff89ad0ced5e6287410c9132f7f235c9e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-177872

Malicious code in metalsmith-xanthus-react-bootstrap-sequelize npm...

EUVD-2025-176355

Malicious code in sirius-react-bootstrap-ignite-pegasus npm...

EUVD-2025-177755

Malicious code in morgan-react-bootstrap-cz-conventional-changelog-helios npm...

Malicious code in sirius-react-bootstrap-ignite-pegasus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dbc6dcd2d217e217d0b5ccb225e7f9e203388db94165fb0a422d99841f2ce048 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-176625

Malicious code in robotics-abiogenesis-command-react-bootstrap npm...

EUVD-2025-177207

Malicious code in phoebe-react-bootstrap-heliophysics-nebula npm...

EUVD-2025-178125

Malicious code in less-loader-react-bootstrap-cosmicray-spectroscopy npm...

MAL-2025-189520 Malicious code in sirius-react-bootstrap-ignite-pegasus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dbc6dcd2d217e217d0b5ccb225e7f9e203388db94165fb0a422d99841f2ce048 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-176784

Malicious code in react-bootstrap-nightwatch-levels-command npm...

MAL-2025-188010 Malicious code in metalsmith-xanthus-react-bootstrap-sequelize (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c249cc1d9495c472c96febcbb4aa5275a3ddc5edcbc067eb482c1e37aa6b7cb3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186812 Malicious code in eridanus-react-bootstrap-telesto-yaml (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b4fe8d301287a2cbf12ee63abb39ad3722dc93d2d21a760e22a0fa2a4727b4c8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...