Malicious code in cluster-css-minimizer-webpack-plugin-module-rehype (npm)

Source: amazon-inspector 991ffbbf4b4673ac58b1abe23a1b69f79be0f6f847edb54bbd400cebef716b6b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

Malicious code in cluster-css-loader-halley-cressida (npm)

Source: amazon-inspector a3390f5930409dbfea7ffedd9530a9a061ccceccce84acc295cc9a2a934d2c47 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

Malicious code in cli-browserify-mini-css-extract-plugin-frontend (npm)

Source: amazon-inspector f83b3e7aaa426034023de777e1dccefb9d2fdcde96c988ed4548ef73db41363c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

Malicious code in chromedriver-css-minimizer-webpack-plugin-petrology-on (npm)

The package chromedriver-css-minimizer-webpack-plugin-petrology-on was found to contain malicious code. --- Credit: OpenSSF source...

Malicious code in child-process-mini-css-extract-plugin-carina-tailwindcss (npm)

Source: amazon-inspector 0600f861e5c7c831867f5d513940f33a86c60daf9f02ae87e935468a6bb3d6e9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

Malicious code in chariklo-winston-less-loader-optimize-css-assets-webpack-plugin (npm)

Source: amazon-inspector 3693f28f8bd18b96b7dfb6dc284c2aa7df716c48b276888bd6a294330f285276 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

Malicious code in chariklo-mini-css-extract-plugin-rollup-google (npm)

Source: amazon-inspector 4885d904321f1e54289c15c6b9924e8d678610816b44065f535762c4433516f7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

Malicious code in changelog-gridsome-perseus-css-minimizer-webpack-plugin (npm)

Source: amazon-inspector 133334c5bcc682926745fc752255a3c1e4da48e8c1e07925a14d0f505ea7526d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

Malicious code in changelog-duplex-hermes-mini-css-extract-plugin (npm)

The package changelog-duplex-hermes-mini-css-extract-plugin was found to contain malicious code. --- Credit: OpenSSF source...

Malicious code in changelog-optimize-css-assets-webpack-plugin-leda-passport (npm)

Source: amazon-inspector 0a5f4f0a1427e61d0122916e6836552a05180e8e2081f271cac87516f12674bf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

Malicious code in changelog-archaeogenetics-mini-css-extract-plugin-dotenv (npm)

Source: amazon-inspector 43c89b3115fa6923864030d78898e8602e4c6c3e8398a4d8729c6a880b206927 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

Malicious code in chalk-soap-eris-mini-css-extract-plugin (npm)

Source: amazon-inspector b9dfb806249dbb13adc7a707fc35469c24fed0c44496bb851f9c5dfff3945dee This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

Malicious code in chalk-run-script-prompts-css-loader (npm)

Source: amazon-inspector 82ea2258006845312d46ca56f78e72c5ffbae2d7e22d59b5775e81b258d8558c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

Malicious code in chalk-mini-css-extract-plugin-await-xo (npm)

Source: amazon-inspector cc95d987297d2296f6f6c0e9d232cbc6e474b2557b42681d1cf2da9395a8e419 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

Malicious code in chakra-ui-gravity-mini-css-extract-plugin-chromedriver (npm)

Source: amazon-inspector e7d0b71d1eacddb260155bb4fac850e0b16be612054cb740d5d819377a0662bb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

Malicious code in ceres-telesto-bootstrap-optimize-css-assets-webpack-plugin (npm)

Source: amazon-inspector 1963d409fb2d23eef932cebebd3c943bfc90713c7057abbfab42485f32f74887 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

Malicious code in centaurus-neptune-css-loader-lynx (npm)

Source: amazon-inspector a0908ef85e2b7fe9360387bd155ca3c553dcb970ba235726eda56533fd71a985 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

Malicious code in centaurus-spectron-element-ui-css-minimizer-webpack-plugin (npm)

Source: amazon-inspector f837f351f411dbd9ba14f5048c27f41b8ff221f3d7ebfb2b720b4aef68c1c6f6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

Malicious code in celeste-optimize-css-assets-webpack-plugin-rollup-europa (npm)

Source: amazon-inspector 1870c7f6969ea7f977b1d82de36603569644e0ace11ba6eb516e75c0cfa8893e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

Malicious code in celeste-optimize-css-assets-webpack-plugin-bulma-ini (npm)

Source: amazon-inspector d248cf7f501c1463ad28cd977a126d93aa084780b79e789cd9a7e12c51f38449 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...