Malicious code in dynamo-kronos-loop-html-webpack-plugin (npm)

Source: amazon-inspector a1facc111643156c60818083a3221391ae68c90805f74a1411946c0be5cc3821 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

Malicious code in dynamo-optimize-css-assets-webpack-plugin-postcss-cluster (npm)

Source: amazon-inspector 83144d9b206c28bc214f1e496ade2f1cdd50ebd1fe16a324124bd89653ef1118 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

Malicious code in draco-terser-webpack-plugin-hermes-corvus (npm)

Source: amazon-inspector 0cfc47154389db6b336180cea32210fc4d2ad1ab645c023aa1af51c7d31900f5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

Malicious code in draco-auth-resolvers-html-webpack-plugin (npm)

Source: amazon-inspector e01a1e333d58856b3ce23766018ec3198d0aa4fc6404f150f0c457c256b1d104 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

Malicious code in draco-optimize-css-assets-webpack-plugin-proxima-nconf (npm)

The package draco-optimize-css-assets-webpack-plugin-proxima-nconf was found to contain malicious code. --- Credit: OpenSSF source...

Malicious code in dotenv-cosmos-promise-css-minimizer-webpack-plugin (npm)

Source: amazon-inspector 57077612de819acf7cf711556c614e951a7d5f2f92fc0d3c785812dc62b803b3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

Malicious code in dorado-html-webpack-plugin-less-procyon (npm)

The package dorado-html-webpack-plugin-less-procyon was found to contain malicious code. --- Credit: OpenSSF source...

Malicious code in docusaurus-optimize-css-assets-webpack-plugin-vortex-json (npm)

Source: amazon-inspector fdaf001656f0e8395e386cb55cbb4a6a0e6fbc5feece1f143c58a49d9e4aa760 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

Malicious code in docusaurus-css-minimizer-webpack-plugin-command-node-sass (npm)

Source: amazon-inspector 3781c2b35c32db7102a4b5fe53e960e27ffc3ebbe36d1de5dd2d10485b7201a3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

Malicious code in docusaurus-html-webpack-plugin-jovian-geckodriver (npm)

Source: amazon-inspector c4609116949d2888210bbbaff7fcc70912b1a68c57396897b64487418f2b06d3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

Malicious code in despina-winston-optimize-css-assets-webpack-plugin-ganymede (npm)

Source: amazon-inspector b0e0f37ee094b8b166260740fe127d4299bc7ca81d422620f1610734025e8e2f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

Malicious code in despina-octans-metalsmith-html-webpack-plugin (npm)

Source: amazon-inspector 9384bbb9fc0aa0e1f16a71cc9464392c53182e411ef298e21246033a29d53347 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

Malicious code in dependencies-schema-enceladus-css-minimizer-webpack-plugin (npm)

Source: amazon-inspector c610954fb474023a819aad12235c36c41e5d0e97c1ca880b9f8d8e01821fae16 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

Malicious code in dependencies-dynamo-optimize-css-assets-webpack-plugin-gatsby (npm)

Source: amazon-inspector 56b88c2d2b382ffb9df5c83d2623b4d0be3b8e53cf60c14ef812d31a57ce193e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

Malicious code in deneb-terser-webpack-plugin-lightyear-enceladus (npm)

Source: amazon-inspector a910f12a93912cafcd341ae149ac82c7f49fcb236b79a4164a070f32aa8ef5df This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

Malicious code in deneb-version-terser-webpack-plugin-lyra (npm)

The package deneb-version-terser-webpack-plugin-lyra was found to contain malicious code. --- Credit: OpenSSF source...

Malicious code in dendrochronology-browserify-cosmiconfig-optimize-css-assets-webpack-plugin (npm)

The package dendrochronology-browserify-cosmiconfig-optimize-css-assets-webpack-plugin was found to contain malicious code. --- Credit: OpenSSF source...

Malicious code in delphinus-passport-blazar-css-minimizer-webpack-plugin (npm)

Source: amazon-inspector 26a974f550f97765a27cf0dd39ccf00ede03b43347eae79c644d36fcf7260c87 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

Malicious code in dedupe-chunks-webpack-plugin (npm)

The package dedupe-chunks-webpack-plugin was found to contain malicious code. --- Credit: OpenSSF source...

Malicious code in darkmatter-pegasus-optimize-css-assets-webpack-plugin-andromeda (npm)

Source: amazon-inspector 3f5049359bccb7733c0fd183c777b326ee012861cd33a678a63ef401518ecc37 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...