MAL-2025-58475 Malicious code in rina-kepok77-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7cf0329e52fb643aaebe7c4740cdd3c73ebc95ec643f0c7b1753dea80f4b6354 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-55579 Malicious code in cindy-jus58-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1938c755f550666a505c44dab9af764c387365d2065b735d5b7d280b5af2dc2f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-58603 Malicious code in sari-martabak76-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 175b57db713a46bf0d60a71498dff0bca7db0bda50c276e00800d74e97090455 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in wati-rangi64-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5faf7024c139781f02e2c77cc32960f4af37005d979fd797c80d26071383cdcf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious Package

Overview karemv1 is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package authorship...

Malicious Package

Overview web-vitals-help is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...

Malicious Package

Overview reactjs-fabric is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...

Malicious Package

Overview @mts-ds/icons is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...

Malicious Package

Overview groupstrap is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package authorship...

Malicious code in siska-tahutek26-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 434836f7f6257e2296c6e7e3c4c2e0e3e64bf5201efbe37b5cc6ace7f02faaa7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in siska-soto16-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b79bc48634f164ba419a987731338eafa51f6516f5a9e80d4cad830597765186 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-54922 Malicious code in siska-oblok62-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 56412d1d9991afcba7ebfe7b8869921980d22ea8193ab8ccf44ed5f52c98dbb7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-54887 Malicious code in sinta-tek2-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d2364877c93e219df5a4d1ba122cc0e1ef2fb5e6444a0e52deece758981e0821 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-54898 Malicious code in siska-dodol5-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aedad9958154ec0af7139b79336eec47a24e8792f832db4525fb39ca263d5763 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in indah-oblok30-pore (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 17225568718c15f475edf1d8ccdf5a861051078d6f8c43930d0349bb6177b58d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in indah-sate99-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0e42dedb56374fc0cab88f236a4d077933ec5c2cfbdd2bde81e9ef002d68e4bd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ogi-mieaceh85-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f5cc6c779679710baad879af75a6fdbc02d0dfb835cc45e279326415bebe8cd5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in okta-oblok2-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 277e81bc5c7746254fb3e8260234090e68167f65584bfa368d487c8abc0e008a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in oktafian-klanting84-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bc4bc8c4a314fe1509b02feed3ac35f85b231a98e4c09a615a89c0732e421362 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in oktafian-martabak22-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e8f01b1c40566d38171711bf89c43b2083ab96edf98ad11961883fc5a06a03d8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...