2270274 matches found
Malicious code in jenkins-trigger-action (npm)
The package communicates with a domain associated with malicious activity. Source: ossf-package-analysis fedbad1242e09329c414a95c493ce62c39c15cad4472ef5fc4a8b9b836834fb4 The OpenSSF Package Analysis project identified 'jenkins-trigger-action' @ 10.0.1 npm as malicious. It is considered malicious...
Malicious code in jest-sync-json-reporter (npm)
The package jest-sync-json-reporter was found to contain malicious code. --- Credit: OpenSSF source...
Malicious code in jest-airbnb-remark-spawn (npm)
Source: amazon-inspector 300e1c61b12b3d1767ab9e42820d1f4b77d4cbb95072146fa11f5d53d1d5e4ba This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...
Malicious code in jest-pegasus-nightwatch-blaze (npm)
Source: amazon-inspector 80191c082be44691a67ad5ff841fed6a08ac9ffa96a49ed27afc0eb1c8dc50eb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...
Malicious code in jest-solis-aldebaran-markdownlint (npm)
Source: amazon-inspector c46f2c78e342536e68a4c350a5c3dd11443b5b602f6fe14b57565716a0de7390 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...
Malicious code in jermiah (npm)
The package jermiah was found to contain malicious code. --- Credit: OpenSSF source...
Malicious code in jest-testcafe-stop-mutation (npm)
Source: amazon-inspector a86d1fa573533763b9af0986cc9b61da9873c4d1ae1b54d6492b6273e0b52129 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...
Malicious code in jest-eslint-plugin-fomalhaut-quasar (npm)
The package jest-eslint-plugin-fomalhaut-quasar was found to contain malicious code. --- Credit: OpenSSF source...
Malicious code in jest-nextjs-wormhole-hadron (npm)
The package jest-nextjs-wormhole-hadron was found to contain malicious code. --- Credit: OpenSSF source...
Malicious code in jest-wezen-corvus-nuxtjs (npm)
Source: amazon-inspector 760766f5a0d8b69d4b0a41207556460ffde2e2318ce46dab3cbaaac001a085ef This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...
Malicious code in jest-cygnus-chariklo-rimraf (npm)
Source: amazon-inspector 896f80547b404fb50cbadc8829b66a71a8905c7345dbd84caa6331254ca7f91a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...
Malicious code in jest-prompts-node-config-bunyan (npm)
Source: amazon-inspector 9728734a942a533c415e6987fd3fa55102d80f96c4b586d9acd545f101f9cc5c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...
Malicious code in jest-formatting (npm)
Source: amazon-inspector 3ee49a1ca7c2affe4868aff50e2e53335cb92e1c3cbd8727ecd7216e3eaf122a The package jest-formatting was found to contain malicious code. --- Credit: OpenSSF source...
Malicious code in jest-sass-loader-axios-algol (npm)
Source: amazon-inspector da37f8b8f1bdc913763359c08e8b7a35cf41c0a115cc87a8035c1244809420db This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...
Malicious code in jest-meteor-centaurus-barnard (npm)
Source: amazon-inspector fbacca549b788fec5ad0c9e1142e7c3f46b32be1fe505973ced9b749179f29b2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...
Malicious code in jest-titan-postcss-loader-galaxy (npm)
Source: amazon-inspector 2a277d7a2ceb2b1f9af71797414949b7377311b1cbeadc87adacedba54221430 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...
Malicious code in jenkinslogger (npm)
Source: amazon-inspector 21d796b423f5f4383bc4b507ad118fc904d4051812fe4ed807ca1b2da6158721 The package jenkinslogger was found to contain malicious code. --- Credit: OpenSSF source...
Malicious code in jest-astro-despina-aurora (npm)
Source: amazon-inspector 569fa8ef9fdbddd1906550949c47b3b5176f9b5c58439068442b4ef54ed34221 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...
Malicious code in jerrytestjerry (npm)
Source: ossf-package-analysis afcd6612db745033b56fd846df2a95e2611a705900675bdd152150c2518fc2ed The OpenSSF Package Analysis project identified 'jerrytestjerry' @ 1.0.1 npm as malicious. It is considered malicious because: - The package communicates with a domain associated with malicious activity...