Malicious code in carpo-antd-less-zenith (npm)

Source: amazon-inspector 1cd06c1c23d3f2cb03e4cf07ea26ad3cd85f7354f359c74d530248a1ed7cce40 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

Malicious code in carina-postcss-auriga-less (npm)

Source: amazon-inspector c5f7eb49ca9a8f5960086bc7093a2e8660219468302235c18df46dce850a980e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

Malicious code in carina-less-prettier-changelog (npm)

Source: amazon-inspector 4a225f8d7c5c6113c9260a3932aa4eaddc2cbb9866a451febac0b39b75bb705a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

Malicious code in carina-google-radiant-less-loader (npm)

The package carina-google-radiant-less-loader was found to contain malicious code. --- Credit: OpenSSF source...

CVE-2026-79992 affecting package emacs for versions less than 29.4-5

CVE-2026-79992 affecting package emacs for versions less than 29.4-5. A patched version of the package is available...

Malicious code in bellatrix-less-blaze-uglify-js (npm)

Source: amazon-inspector 74db94fef3e6bebbe78f8ea60ef62bf42f824921583aea308e9feae3e872aa05 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

Malicious code in backend-colors-less-loader-xanthus (npm)

Source: amazon-inspector 82407ce8672abae8fefab2563543423cac0a576a6ed179bc46d7835de5be107d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

Malicious code in await-less-xo-package (npm)

Source: amazon-inspector 7a504bf7c4d1d9c1665d27175e7e303cf7a0698c8d6828ee8a8a07fb9acd4304 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

Malicious code in auriga-less-cz-conventional-changelog-axios (npm)

Source: amazon-inspector 903507c242393d0623b15f783488841c20cbebd61009083d00d941960d42d7ca This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

Malicious code in async-sedna-prompts-less-loader (npm)

Source: amazon-inspector 1eb88c2f8971fe4760ed74b9feeaace97081beccb982086fb14a92bb504a614c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

Malicious code in astrophysics-less-loader-archaeogenetics-chalk (npm)

The package astrophysics-less-loader-archaeogenetics-chalk was found to contain malicious code. --- Credit: OpenSSF source...

Malicious code in astrometry-passport-less-filament (npm)

Source: amazon-inspector c137c4ef5872efdadb22fcb81eff579f9b3d68099ea3d74d52eb029fe7d10edd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

Malicious code in astrobiology-less-loader-plutology-nightwatch (npm)

The package astrobiology-less-loader-plutology-nightwatch was found to contain malicious code. --- Credit: OpenSSF source...

Malicious code in arcturus-global-hermes-less-loader (npm)

The package arcturus-global-hermes-less-loader was found to contain malicious code. --- Credit: OpenSSF source...

Malicious code in aquarius-delphinus-less-iota (npm)

The package aquarius-delphinus-less-iota was found to contain malicious code. --- Credit: OpenSSF source...

Malicious code in antares-less-loader-middleware-sequelize (npm)

Source: amazon-inspector ae569a3671d9274588de48ed5de8d667d2f2d636d898cc6832f261b42ef93686 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

Malicious Package

Overview algol-forever-less-exoplanet is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this...

Malicious code in algol-forever-less-exoplanet (npm)

The package algol-forever-less-exoplanet was found to contain malicious code. --- Credit: OpenSSF source...

Malicious code in algol-centaurus-less-betelgeuse (npm)

The package algol-centaurus-less-betelgeuse was found to contain malicious code. --- Credit: OpenSSF source...

Malicious code in aether-venus-lacerta-less-loader (npm)

The package aether-venus-lacerta-less-loader was found to contain malicious code. --- Credit: OpenSSF source...