Developers/projects that have proven, by past actions in their repositories, to be untrustworthy
- node-ipc MALWARE: CVE Snyk.io
- sweetalert2 PROTESTWARE/MALWARE: Wayback Machine
- faker.js DELETION
- colors MALWARE: Snyk.io
- peacenotwar MALWARE: Snyk.io
- es5-ext PROTESTWARE/MALWARE: Wayback Machine
- event-source-polyfill PROTESTWARE/MALWARE: Wayback Machine
- RedisDesktopManager PROTESTWARE/DISCRIMINATIVE DELETION: Wayback Machine
- Tasmota PROTESTWARE/MALWARE: Wayback Machine
- styled-components PROTESTWARE: Wayback Machine
- pnpm DISCRIMINATIVE EXCLUSION: Wayback Machine
- RIAEvangelist: node-ipc, peacenotwar
- limonte: sweetalert2
- Marak: faker.js, colors
- medikoo: es5-ext
- koshkin-ccna: es5-ext
- akaKAIN: es5-ext
- Yaffle: event-source-polyfill
- uglide: RedisDesktopManager
- arendst: Tasmota
- zkochan: pnpm