Malicious Package

Overview ilovefemboys is a malicious package. This package is part of a malicious npm campaign that abused the registry to distribute ad-supported web proxy applications disguised as educational websites. The package contains web assets intended to bypass network restrictions and generate...

ruby: SMTP command injection via CRLF sequences in RCPT TO or MAIL FROM commands in Net::SMTP

A SMTP command injection flaw was found in the way Ruby's Net::SMTP module handled CRLF sequences in certain SMTP commands. An attacker could potentially use this flaw to inject SMTP commands in a SMTP session in order to facilitate phishing attacks or spam campaigns...

Malicious code in tray-pazap-paoim (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 00fef30279b3ca07eede2614f1d1afb20c88c16c1e36d00b1bcff522137fd496 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-126272 Malicious code in erwin-rangi18-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b95f878dc1c538d715d6c1afc03769149d1da77b8e2220201faf43fc9c96539a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in eka-tomat89-sumpek (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9316055e8aac85f2aafdab145f406084277297c4a005769c25dec491fd7c3ff1 The package eka-tomat89-sumpek was found to contain malicious code. This package appears to be part of the tea.xyz token reward campaign that flooded...

Malicious code in fitri-enting37-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 371b3437e9763736d40bf837e5eb71c48083c544706fee80dbf5549ef444d828 The package fitri-enting37-ruro was found to contain malicious code. This package appears to be part of the tea.xyz token reward campaign that floode...

Malicious code in bambang-mendoan40-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3e627158c44b8219d7783f0543529031d8b48c3bae8bc83b5d0304a0674abf10 The package bambang-mendoan40-breki was found to contain malicious code. This package appears to be part of the tea.xyz token reward campaign that...

Malicious code in budi-empal81-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6b02912c698e392a49c4523b2a95c02cd60425a19f58a509aa428098ce806d64 The package budi-empal81-breki was found to contain malicious code. This package appears to be part of the tea.xyz token reward campaign that flooded...

Malicious code in gilang-enting95-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2e17df26ba288a749bc70a37ca70fdb5253446584e638f953652ab6385de2134 The package gilang-enting95-miaww was found to contain malicious code. This package appears to be part of the tea.xyz token reward campaign that...

Malicious code in tuti-martabak70-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d583b314745ae58b0736b7eadf37c2b10fdcc898eba9c746b95cae14e9e8a1c1 The package tuti-martabak70-ruro was found to contain malicious code. This package appears to be part of the tea.xyz token reward campaign that flood...

Malicious code in umi-sambel75-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a22ca147939ab545cc2c75dd206b8bb37e3c4eeddcdcefc0386d841373fa7ff4 The package umi-sambel75-breki was found to contain malicious code. This package appears to be part of the tea.xyz token reward campaign that flooded...

Malicious code in andi-bakwan91-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 053b2ee902025463cd2170585c96851a4447d78031152fab5e60439cecf9266f The package andi-bakwan91-riris was found to contain malicious code. This package appears to be part of the tea.xyz token reward campaign that floode...

Malicious code in cici-keripik16-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bd451309ddbf558769811b188f9022beec11e5fea36cd9ce3d19d2d19d44de7a The package cici-keripik16-miaww was found to contain malicious code. This package appears to be part of the tea.xyz token reward campaign that flood...

Malicious code in andi-nasi47-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 775880ce13e2f6d0200bef297680ca2337945f731c3f57d544e1d14a73ad4667 The package andi-nasi47-sluey was found to contain malicious code. This package appears to be part of the tea.xyz token reward campaign that flooded...

Malicious code in cici-jus61-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 548fbf485344f8061f1f2b8edad6821971436bc12b46752284365f3131ff7069 The package cici-jus61-sukiwir was found to contain malicious code. This package appears to be part of the tea.xyz token reward campaign that flooded...

Malicious code in budi-martabak61-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0ab5442962472f1c076d27912ec25fb2bb65c6b2f746e04b5f4d92fa609039f7 The package budi-martabak61-breki was found to contain malicious code. This package appears to be part of the tea.xyz token reward campaign that...

Malicious code in erick-tahutek74-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 58078c9310c9e8b77c03251a135d8b19adf997687fba9e897a19a65aef63c506 The package erick-tahutek74-miaww was found to contain malicious code. This package appears to be part of the tea.xyz token reward campaign that...

Malicious code in citra-telur85-remi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d7206e13f15e35cfed242a80e5a64d7caac21ee445eee809fa42b1dfebae3058 The package citra-telur85-remi was found to contain malicious code. This package appears to be part of the tea.xyz token reward campaign that flooded...

Malicious code in utomo-bakwan72-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6e0c5fef6bdc25a96abb71759af088353f3e090526967647ebc54c0fe4635e48 The package utomo-bakwan72-ruro was found to contain malicious code. This package appears to be part of the tea.xyz token reward campaign that floode...

Malicious code in cindy-bakso50-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5f78efcd09bf0836f0caf39c974dba7abdc30046bafdfb1eb06e186dd07a5d16 The package cindy-bakso50-sukiwir was found to contain malicious code. This package appears to be part of the tea.xyz token reward campaign that...