MAL-2025-55723 Malicious code in conventional_mammal_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d948f59c3465997390c8c2660a63acb95fc8ffaceb58270870a891607dfcb8c9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-58060 Malicious code in oktafian-lengko11-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 07056ea29f3a660fd7fc690801d5aab22ac00325e00666ca3dc2fedb0a04224b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-58457 Malicious code in rifqi-telur71-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6437071decddc9171a6ecd99ae8e2667c8f18d08230b163117375260b4cf1ad0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-57723 Malicious code in nadia-menjes66-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 96c00fbd04d7ce3b4d05280ee4e3a393295c15945bb47d32aa61d4820d79ae63 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-57743 Malicious code in nadia-wajit36-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 16a1222830e5d3259d323f8723db7dcac12760c1529787fa7f0a543da66b2909 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-59870 Malicious code in zul-lumpur18-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e478f59ff5060c2de422afe4ee71cd8c8b9be7452b0cac82c51902dfa8a8d228 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-56819 Malicious code in indah-kripik61-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 574934c397986772ae031ecba22bce2cd34ea1eda10933384726ba8b330e2de0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-58064 Malicious code in oktafian-martabak46-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4cd3d1acb7ee232e8929600b85587cf4e7563e46bc76a2dda81fd7ab70b7c0a8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in wati-rangi64-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5faf7024c139781f02e2c77cc32960f4af37005d979fd797c80d26071383cdcf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-58603 Malicious code in sari-martabak76-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 175b57db713a46bf0d60a71498dff0bca7db0bda50c276e00800d74e97090455 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-58500 Malicious code in rina-rujaksoto94-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2410ba8e814e6797ed8c3f6f217ed2ef6cf76cb444abf48ab4eda82e75828947 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cici-lengko87-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ab4228b6697bf7f6342232e84776af408629fd963d86cc8191209cd01c6328f6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious Package

Overview karemv1 is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package authorship...

Malicious Package

Overview web-vitals-help is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...

Malicious Package

Overview reactjs-fabric is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...

Malicious Package

Overview @mts-ds/icons is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...

Malicious Package

Overview groupstrap is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package authorship...

MAL-2025-54898 Malicious code in siska-dodol5-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aedad9958154ec0af7139b79336eec47a24e8792f832db4525fb39ca263d5763 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in siska-soto16-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b79bc48634f164ba419a987731338eafa51f6516f5a9e80d4cad830597765186 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in siska-tahutek26-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 434836f7f6257e2296c6e7e3c4c2e0e3e64bf5201efbe37b5cc6ace7f02faaa7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...