Malicious Package

Overview ilovefemboys is a malicious package. This package is part of a malicious npm campaign that abused the registry to distribute ad-supported web proxy applications disguised as educational websites. The package contains web assets intended to bypass network restrictions and generate...

ruby: SMTP command injection via CRLF sequences in RCPT TO or MAIL FROM commands in Net::SMTP

A SMTP command injection flaw was found in the way Ruby's Net::SMTP module handled CRLF sequences in certain SMTP commands. An attacker could potentially use this flaw to inject SMTP commands in a SMTP session in order to facilitate phishing attacks or spam campaigns...

Malicious code in tray-pazap-paoim (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 00fef30279b3ca07eede2614f1d1afb20c88c16c1e36d00b1bcff522137fd496 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-126272 Malicious code in erwin-rangi18-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b95f878dc1c538d715d6c1afc03769149d1da77b8e2220201faf43fc9c96539a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tania-soto61-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector edfe0f6b483d022af5f472d9b66194d4978a548a14bc3d8987b6515859cf449c The package tania-soto61-sukiwir was found to contain malicious code. This package appears to be part of the tea.xyz token reward campaign that flood...

Malicious code in tania-sego43-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 289b07a632e8445797c8c19ebc0dc3710698c029545a2da22f01c859db0f5bf5 The package tania-sego43-riris was found to contain malicious code. This package appears to be part of the tea.xyz token reward campaign that flooded...

Malicious code in budi-martabak61-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0ab5442962472f1c076d27912ec25fb2bb65c6b2f746e04b5f4d92fa609039f7 The package budi-martabak61-breki was found to contain malicious code. This package appears to be part of the tea.xyz token reward campaign that...

Malicious code in dewanto-pecel49-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3727fbdba5b6a2177fb2a85b20c0963f94740328f5d3daaca0620da633c6e012 The package dewanto-pecel49-breki was found to contain malicious code. This package appears to be part of the tea.xyz token reward campaign that...

Malicious code in dewi-otak-otak39-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ab4e71d58f358cafc93233270e818a1222c0a5636c7769424f19ace7e368c040 The package dewi-otak-otak39-sluey was found to contain malicious code. This package appears to be part of the tea.xyz token reward campaign that...

Malicious code in eka-rujak80-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 50e1826f8c32e25a41be9ebdcdffa387a88791ea85777da04bf6bb712ac4c50c The package eka-rujak80-sukiwir was found to contain malicious code. This package appears to be part of the tea.xyz token reward campaign that floode...

Malicious code in tuti-martabak70-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d583b314745ae58b0736b7eadf37c2b10fdcc898eba9c746b95cae14e9e8a1c1 The package tuti-martabak70-ruro was found to contain malicious code. This package appears to be part of the tea.xyz token reward campaign that flood...

MAL-2025-49927 Malicious code in bella-rawon49-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e6cefcc19bdd59840ea251ea26b1a2771683c062565a9769e28160dc373125c2 The package bella-rawon49-ruro was found to contain malicious code. This package appears to be part of the tea.xyz token reward campaign that flooded...

Malicious code in tania-telurtahu3-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b101cbe0f9e64c42fef2cac69e19a83708002846d7b88acbb5a9913f14d72b7e The package tania-telurtahu3-riris was found to contain malicious code. This package appears to be part of the tea.xyz token reward campaign that...

Malicious code in dian-kue59-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 996384517636c42777682d9a3c49847391486f7804785d1771dd0e4e9a11ccdb The package dian-kue59-sluey was found to contain malicious code. This package appears to be part of the tea.xyz token reward campaign that flooded n...

Malicious code in candra-tapai46-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 39e4c8fb59104deb1853243e2882f8c6dc76df5365f5a2231cdea0b4daf85001 The package candra-tapai46-sukiwir was found to contain malicious code. This package appears to be part of the tea.xyz token reward campaign that...

Malicious code in cici-kue51-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 716b26bcd853945d36b39a258091259dde874930ebc799ef9a60a57c2927af4d The package cici-kue51-sluey was found to contain malicious code. This package appears to be part of the tea.xyz token reward campaign that flooded n...

Malicious code in cindy-miebogor39-tititugel (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9947a6b27e2d593dc5db278b7e3215a17495d74b3a1ab7d7ea9fb9d525de40d8 The package cindy-miebogor39-tititugel was found to contain malicious code. This package appears to be part of the tea.xyz token reward campaign that...

Malicious code in citra-papeda89-pore (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fd6aff7e511ac2fd578ecae0f15628256fbc81bbb3de4f884c943898ec8c948b The package citra-papeda89-pore was found to contain malicious code. This package appears to be part of the tea.xyz token reward campaign that floode...

Malicious code in fauzi-serimuka83-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bd40efe289c4fc26cdaf84d3de72b59f79bbe8a5476b9fce96f7f3857e46474f The package fauzi-serimuka83-sluey was found to contain malicious code. This package appears to be part of the tea.xyz token reward campaign that...

MAL-2025-51395 Malicious code in citra-brongkos96-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c282131975644cfdcf7858fd6ceb236c6886d2611a3cdd7ec932d2f543845ef5 The package citra-brongkos96-breki was found to contain malicious code. This package appears to be part of the tea.xyz token reward campaign that...