MAL-2025-59870 Malicious code in zul-lumpur18-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e478f59ff5060c2de422afe4ee71cd8c8b9be7452b0cac82c51902dfa8a8d228 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-56162 Malicious code in excess_thrush_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b37b768baf0031102e4332efc568a899699e747db1bb9cfc7dd7751983e2f996 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-56628 Malicious code in hadianto-kacang22-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2e07d0c6f60155e900e13aedb3727dfc0ba2dc629a1eeefacf380680b08c322a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-59577 Malicious code in xaver-serimuka1-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7f7d02e03427f745882b3c77eab0c42f8ac771319523069a5616636497b5327d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-55555 Malicious code in cici-oncom30-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 432f68c0ffc546904a13afda07e683807e28b1cae04c0e67b663140f15a0e895 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-56731 Malicious code in hendra-nasi73-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fc75fc962875617ac364d4e59ccd3e1566d48067836c59537694fbdb2e77c002 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in zaki-keripik5-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 85340ea1c799b024edda15cffa4f620b35ffb572313dd39d419456012c0107c6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-59225 Malicious code in vera-dradag58-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0effd2ac42213bc4da7f9ad7859678515bad0d716118673331013d19d55ea0f8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-58060 Malicious code in oktafian-lengko11-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 07056ea29f3a660fd7fc690801d5aab22ac00325e00666ca3dc2fedb0a04224b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-58596 Malicious code in sari-ketan7-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0ff2ee7e0f4ed1545ea83e019d5916c05edcfcfa3291ca3815238b9b0ac914da This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-58185 Malicious code in protestant_flyingfish_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 43ee0a9d3a8d7f8bfa71cd9a98ed94a854909742ccd5b0b8036f31dc0485af5a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-57505 Malicious code in mahesa-ubi6-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 939fdfdec18d231591781ea67dc2b9f4363d70923fda38edf9ffb5099099912e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lutfi-sambalado52-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2be67de85f80ed4d90eb2654904d127b6df48db547728b972dd889d780bb22eb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-59633 Malicious code in yanti-lontong52-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4cafdef28ccb98ddd2c1479e98719e08da9b54a6f3e59c6c5f10ad156b00e0b1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-57082 Malicious code in joko-ubi65-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8d5857148346e1ac4c018b792ba929317d175589da812c827dba76e6b1f6cfbe This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious Package

Overview karemv1 is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package authorship...

Malicious Package

Overview web-vitals-help is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...

Malicious Package

Overview reactjs-fabric is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...

Malicious Package

Overview @mts-ds/icons is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...

Malicious Package

Overview groupstrap is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package authorship...