domain

npm.tqm-mfe.io

discovered 2026-07-01

Fabricated internal npm registry lure in the @tqm-mfe/main README (registry=https://npm.tqm-mfe.io). Scope-parameterized social-engineering artifact (npm.<scope>.io) to imply a private registry (the precondition for dependency confusion); NOT confirmed functional infrastructure.

Campaigns

Linked packages

Read the full analysis →