Malicious code in eslint-supervisor-rollup-plugin-hapi (npm)

Source: amazon-inspector f35eaf1dd0ae02b839f771c4647f77510a80e88ff4c7236de32a826f8b817cef This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

Malicious code in eslint-plugin-woocommerce (npm)

--- Credit: OpenSSF source...

Malicious code in eslint-plugin-zephyr-xenos-betelgeuse (npm)

Source: amazon-inspector 3de003ad5beff2831f64a6b34d25377bdabc07ac8babbabbe04176801ae9094b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

Malicious code in eslint-plugin-zammad (npm)

--- Credit: OpenSSF source...

Malicious code in eslint-plugin-wpvip (npm)

--- Credit: OpenSSF source...

Malicious code in eslint-terser-webpack-plugin-nightwatch-csrf (npm)

Source: amazon-inspector a5d7c459fe1fbf66aec4fc51d75472c90fe2821ff50683d8de793bf04121a83d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

Malicious code in eslint-plugin-shein-soc-raw (npm)

--- Credit: OpenSSF source...

Malicious code in eslint-plugin-virtru-lint (npm)

The package eslint-plugin-virtru-lint was found to contain malicious code. --- Credit: OpenSSF source...

Malicious code in eslint-plugin-whatever (npm)

The package communicates with a domain associated with malicious activity. --- Credit: OpenSSF source...

Malicious code in eslint-plugin-thuban-firebase-centauri (npm)

Source: amazon-inspector a802786c89a13e156760fbeb7db45c40c68ecb95bbfc4db4e4fd6dee4a743054 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

Malicious code in eslint-plugin-superhuman-custom-rules (npm)

Source: amazon-inspector 2e50258e14acd3712854f3059d043b8c4982563ab8d401555b253702a3212279 The package eslint-plugin-superhuman-custom-rules was found to contain malicious code. --- Credit: OpenSSF source...

Malicious code in eslint-plugin-quito-wezen-npm (npm)

Source: amazon-inspector beeae429e6485aebd709417772e4bd48dc3a1ea5b5d9bbfbe191a75285b72635 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

Malicious code in eslint-plugin-rossum (npm)

Source: ossf-package-analysis 35e31ca4335b37c9acf1cc537c185f8c152911f991e75e3b8b248348d7f42e0a The OpenSSF Package Analysis project identified 'eslint-plugin-rossum' @ 7.7.7 npm as malicious. It is considered malicious because: - The package communicates with a domain associated with malicious...

Malicious code in eslint-plugin-prettier (npm)

This package installs a windows based malware file node-gyp.dll via install.js --- Credit: OpenSSF source...

Malicious code in eslint-plugin-pyxis-library-style-loader (npm)

Source: amazon-inspector cf79a19acb73dbbede82dbfef01183fef070d4bb00c153e59937a9e5a306132d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

Malicious code in eslint-plugin-spectrum-web-components (npm)

The package eslint-plugin-spectrum-web-components was found to contain malicious code. --- Credit: OpenSSF source...

Malicious code in eslint-plugin-rdv-insertion (npm)

Source: ossf-package-analysis b6a011f4c21be2958b339f3da564f192dce2329a2d29903a2b0f01933708d94a The OpenSSF Package Analysis project identified 'eslint-plugin-rdv-insertion' @ 7.99.99 npm as malicious. It is considered malicious because: - The package communicates with a domain associated with...

Malicious code in eslint-plugin-plentific (npm)

--- Credit: OpenSSF source...

Malicious code in eslint-plugin-relay-internal (npm)

The package eslint-plugin-relay-internal was found to contain malicious code. --- Credit: OpenSSF source...

Malicious code in eslint-plugin-public-forever-pegasus (npm)

Source: amazon-inspector c0d03336e11c27ad162f3de5c4a1d791e7294c5177763e8c8499faf2ded3fc75 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...