Malicious Package

Overview link-flare-loglevel-command is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this...

Malicious code in link-flare-loglevel-command (npm)

Source: amazon-inspector 3f4bc63028f7bdf21b5dde2af04c7dc1efbbfd1ddf8c87aa557a35e399bcf6c5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

Malicious code in link-ora-loglevel-andromeda (npm)

Source: amazon-inspector 81750155f6317d515808884158c0219879bb3a01bfd1e4f522848f357c7a422e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

Malicious code in less-socketio-loglevel-carpo (npm)

Source: amazon-inspector 260abb768f8062126b91ed7c1e0822ea7d2cd0490e64c0ef6d0235f618e5ccf1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

Malicious code in less-loader-sirius-perseus-loglevel (npm)

Source: amazon-inspector 4f8179d4fd0c1a7546ad53b8f5e279073c0c9796bf3b0ca8aafd3ec5fbb3ddf7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

Malicious code in koa-soap-loglevel-hyperion (npm)

Source: amazon-inspector 590e6762f5768773f176dc4f33dd25323b31d82b81f719feeec468c62ea9403e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

Malicious code in javascript-loglevel-chalk-soap (npm)

Source: amazon-inspector a33bbaed4ef778c8d54389e0792e928be4ed1d75e382fb7d9b775e0e5dc58697 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

Malicious code in jabbah-cressida-eridanus-loglevel (npm)

Source: amazon-inspector 3306fc17cb95846ac5a3a367c5869ade615bfbfdba0131b4a319e8ad4da9df03 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

Malicious code in izar-loglevel-unuk-typeorm (npm)

Source: amazon-inspector b88125d1d338fcaee6bfa1402fb1a2d92a627235f0690f320d829c9393693838 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

Malicious code in isostasy-morgan-unuk-loglevel (npm)

The package isostasy-morgan-unuk-loglevel was found to contain malicious code. --- Credit: OpenSSF source...

Malicious code in inquirer-loglevel-meissa-oauth (npm)

Source: amazon-inspector dde1164a326a627b51b374f38cdf42b0be4fa461d5adb8c8c1427ae83d823cbb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

Malicious code in impulse-dorado-kinetic-loglevel (npm)

Source: amazon-inspector aa9e67ebfd227fed972db13048c60c0cd362f419c897718acfb9b05f62a5c653 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

Malicious code in hyperion-loglevel-quark-auth0 (npm)

Source: amazon-inspector 12b941f79038bbce9958ae4c4b3f47fbd6a6aa8a398a4c02a26fcab2ba71c021 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

Malicious code in hugo-loglevel-fomalhaut-optimize-css-assets-webpack-plugin (npm)

Source: amazon-inspector 581e61a3fb294771917013ca8905c2e2d9088aebd76a3cae499452e2fbfbd70a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

Malicious code in hexo-ora-quark-loglevel (npm)

Source: amazon-inspector 7ede24e2e082bd4c2dd3b03c782c1472ad70a135650e7ee57998bd9e62f1e531 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

Malicious code in graviton-outercore-loglevel-quark (npm)

The package graviton-outercore-loglevel-quark was found to contain malicious code. --- Credit: OpenSSF source...

Malicious code in graphql-callback-loglevel-standard (npm)

The package graphql-callback-loglevel-standard was found to contain malicious code. --- Credit: OpenSSF source...

Malicious code in got-loglevel-ceres-acamar (npm)

Source: amazon-inspector 9b2e9f729f99ce1db8045e28e7e2b5344d4377dd1b1a8f21d8fe39d2c57b0dbe This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

Malicious code in global-loglevel-lacerta-figures (npm)

Source: amazon-inspector 852a30326ba54024be4ad2981dd085309ca4d5aec2dd66869c85e5abf7ee2433 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

Malicious code in express-ariel-antares-loglevel (npm)

Source: amazon-inspector f0274a45306399efeb99751314c5ad798fca3103e6af6cba51a2b547aa320a99 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...