Malicious Package

Overview ilovefemboys is a malicious package. This package is part of a malicious npm campaign that abused the registry to distribute ad-supported web proxy applications disguised as educational websites. The package contains web assets intended to bypass network restrictions and generate...

ruby: SMTP command injection via CRLF sequences in RCPT TO or MAIL FROM commands in Net::SMTP

A SMTP command injection flaw was found in the way Ruby's Net::SMTP module handled CRLF sequences in certain SMTP commands. An attacker could potentially use this flaw to inject SMTP commands in a SMTP session in order to facilitate phishing attacks or spam campaigns...

Malicious code in tray-pazap-paoim (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 00fef30279b3ca07eede2614f1d1afb20c88c16c1e36d00b1bcff522137fd496 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-126272 Malicious code in erwin-rangi18-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b95f878dc1c538d715d6c1afc03769149d1da77b8e2220201faf43fc9c96539a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-51679 Malicious code in eko-lutis72-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 853843399425b5291f683d1c13dcbd74d29e74cc8b550973e81446f9669d866f The package eko-lutis72-breki was found to contain malicious code. This package appears to be part of the tea.xyz token reward campaign that flooded...

MAL-2025-49891 Malicious code in bella-bakso22-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c4fd193373f6e3756244d82345f0c8a00eb236a0a1d067f754ef6049207b3038 The package bella-bakso22-ruro was found to contain malicious code. This package appears to be part of the tea.xyz token reward campaign that flooded...

MAL-2025-51887 Malicious code in fauzi-toge93-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b115318608158085eb4101b189f2d25ebd0770ef5fa412dd9c77365dd046fffb The package fauzi-toge93-miaww was found to contain malicious code. This package appears to be part of the tea.xyz token reward campaign that flooded...

MAL-2025-51006 Malicious code in bayu-takokak65-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector db92d125372b6b331d7bf6c86a0e4ab22ce3964254b129732f9b6ea3897e2a04 The package bayu-takokak65-sluey was found to contain malicious code. This package appears to be part of the tea.xyz token reward campaign that flood...

Malicious code in bayu-bika75-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f63f907a798ec478f8f91bba688c85e3f3f56015d06eeb42509d1a1eca7a1b78 The package bayu-bika75-miaww was found to contain malicious code. This package appears to be part of the tea.xyz token reward campaign that flooded...

Malicious code in erick-tahutek74-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 58078c9310c9e8b77c03251a135d8b19adf997687fba9e897a19a65aef63c506 The package erick-tahutek74-miaww was found to contain malicious code. This package appears to be part of the tea.xyz token reward campaign that...

Malicious code in budi-empal81-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6b02912c698e392a49c4523b2a95c02cd60425a19f58a509aa428098ce806d64 The package budi-empal81-breki was found to contain malicious code. This package appears to be part of the tea.xyz token reward campaign that flooded...

Malicious code in citra-tahu82-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4c21d39325139a42e794f810b103df5f5ceee429dc64f19fc886c92c47fd8bcf The package citra-tahu82-riris was found to contain malicious code. This package appears to be part of the tea.xyz token reward campaign that flooded...

Malicious code in wawan-gulai31-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4877800c5a122cb29e349d97c69d9b4a5dc9ab39becf2e5c73331fff27c93186 The package wawan-gulai31-ruro was found to contain malicious code. This package appears to be part of the tea.xyz token reward campaign that flooded...

Malicious code in dewi-esdoger72-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 43c907863fde910bb1d91b07d6a575b31055e1b0957861e790906fd06f9d22b3 The package dewi-esdoger72-sukiwir was found to contain malicious code. This package appears to be part of the tea.xyz token reward campaign that...

Malicious code in erick-getas53-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1a77550c81258ef81131258488f2b4a22069680622ee67ac1f4e59fb2b331248 The package erick-getas53-breki was found to contain malicious code. This package appears to be part of the tea.xyz token reward campaign that floode...

Malicious code in utomo-bakwan72-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6e0c5fef6bdc25a96abb71759af088353f3e090526967647ebc54c0fe4635e48 The package utomo-bakwan72-ruro was found to contain malicious code. This package appears to be part of the tea.xyz token reward campaign that floode...

Malicious code in cici-keripik16-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bd451309ddbf558769811b188f9022beec11e5fea36cd9ce3d19d2d19d44de7a The package cici-keripik16-miaww was found to contain malicious code. This package appears to be part of the tea.xyz token reward campaign that flood...

Malicious code in andi-bakwan91-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 053b2ee902025463cd2170585c96851a4447d78031152fab5e60439cecf9266f The package andi-bakwan91-riris was found to contain malicious code. This package appears to be part of the tea.xyz token reward campaign that floode...

Malicious code in bambang-mendoan40-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3e627158c44b8219d7783f0543529031d8b48c3bae8bc83b5d0304a0674abf10 The package bambang-mendoan40-breki was found to contain malicious code. This package appears to be part of the tea.xyz token reward campaign that...

Malicious code in candra-tapai46-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 39e4c8fb59104deb1853243e2882f8c6dc76df5365f5a2231cdea0b4daf85001 The package candra-tapai46-sukiwir was found to contain malicious code. This package appears to be part of the tea.xyz token reward campaign that...