Malicious code in hugo-thermosphere-nebula-spectroscopy (npm)

The package hugo-thermosphere-nebula-spectroscopy was found to contain malicious code. --- Credit: OpenSSF source...

Malicious code in hugo-stop-callback-bootstrap (npm)

The package hugo-stop-callback-bootstrap was found to contain malicious code. --- Credit: OpenSSF source...

Malicious code in hugo-xenos-soap-deneb (npm)

The package hugo-xenos-soap-deneb was found to contain malicious code. --- Credit: OpenSSF source...

Malicious code in hulp (npm)

The package hulp was found to contain malicious code. --- Credit: OpenSSF source...

Malicious code in hukax (npm)

The package hukax was found to contain malicious code. --- Credit: OpenSSF source...

Malicious code in hui-micro-app (npm)

Source: ossf-package-analysis d2f3e6ea52ec1a1674db2757b09ef3de1301aec7ae4e0f6a6128b533179cb071 The OpenSSF Package Analysis project identified 'hui-micro-app' @ 3.0.0 npm as malicious. It is considered malicious because: - The package communicates with a domain associated with malicious activity...

Malicious code in hugo-transport-node-config-hermes (npm)

Source: amazon-inspector ae9423feda132f6fc399753b25257e55a7b21305d3123c15d455b262af1712ba This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

Malicious code in hulasync (npm)

The package hulasync was found to contain malicious code. --- Credit: OpenSSF source...

Malicious code in hugomatic (npm)

The package hugomatic was found to contain malicious code. --- Credit: OpenSSF source...

Malicious code in huixuan-yuzhou-vol2a (npm)

The package huixuan-yuzhou-vol2a was found to contain malicious code. --- Credit: OpenSSF source...

Malicious code in huiguan (npm)

The package huiguan was found to contain malicious code. --- Credit: OpenSSF source...

Malicious code in hugehard (npm)

The package hugehard was found to contain malicious code. --- Credit: OpenSSF source...

Malicious code in huge_parrotfish_z3n (npm)

Source: amazon-inspector 537356a6df7f46107cd3fb27eca053687027d7fc3d8c7c1864c09fd04186e117 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

Malicious code in hugo-neptune-config-mineralogy (npm)

The package hugo-neptune-config-mineralogy was found to contain malicious code. --- Credit: OpenSSF source...

Malicious code in hugo-fornax-neptune-playwright (npm)

The package hugo-fornax-neptune-playwright was found to contain malicious code. --- Credit: OpenSSF source...

Malicious code in hugo-cloudflare-docs (npm)

--- Credit: OpenSSF source...

Malicious code in hugo-draco-mini-css-extract-plugin-paleoanthropology (npm)

The package hugo-draco-mini-css-extract-plugin-paleoanthropology was found to contain malicious code. --- Credit: OpenSSF source...

Malicious code in huge_cuckoo_z3n (npm)

Source: amazon-inspector 5cad74342cadde177a1fea07094060ee3c1ef2d75000c03f6443e63d7b601fe1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

Malicious code in hugo-changelog-achernar-event (npm)

The package hugo-changelog-achernar-event was found to contain malicious code. --- Credit: OpenSSF source...

Malicious code in huggingface-vscode (npm)

Source: ossf-package-analysis 05d5f0f4f0cc4f4b8a99f6a6b4c1ca2e0aa13ab6cd2d0d7fd3e7a23a2d9593cb The OpenSSF Package Analysis project identified 'huggingface-vscode' @ 100.2.2 npm as malicious. It is considered malicious because: - The package communicates with a domain associated with malicious...