Malicious code in thread-link-code-stack-old (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0332ea06ac8e14a11d6373d745a8c9acfba7cf0627fbf54277743d4d2dcd8414 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in oliobc-uyg-afayafuyauicig (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4d7a30bb59a4e5a3df7c916cd5e3ab42a7409e9e99a557a7d63c1c5d058b31a8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tehah-nuyadtasfag-amanasatan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 36379a76bed2912923059d0f2a7fa330b33ce988081db6d0deabdad15f5f3fb3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in okta-sasag50-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 580b573fa31bb1ecebce6df9b7e937c491950cf19b26102999d84711d91acd94 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-108079 Malicious code in rifqi-klanting58-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e82301e77c3a7e1abe87bd565394362b6c1beae15b73efaf252accdfc8735759 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-61083 Malicious code in productive_perch_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 017d60c3dd13dfcd527e6d73889050e43bacdd2d1206338a05ef1f7379229d34 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tppeppullintel (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx cab3b9efbaa84b73a86a0c7738817885903a8506db939223d841b13e3f6fc461 EsqueleSquad group published nearly 6000 malicious PyPi and NPM packages, executing spyware and information-stealing malware...

Malicious code in py-randcpustr (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx d267a67563dcd3a2e4fb46858e2769518aca4b257f95bf0c333d2648711bd0ee EsqueleSquad group published nearly 6000 malicious PyPi and NPM packages, executing spyware and information-stealing malware...

Malicious code in liburlosintstudy (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx 50d638ad3755b38ccd54c7a5396d6392a2d6a0ddd0eb34760525e2b467ca6cd0 EsqueleSquad group published nearly 6000 malicious PyPi and NPM packages, executing spyware and information-stealing malware...

Malicious code in py-hydralgtbvm (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx 7e04d0a35f3ec31a6e5775ace11d90f24317271340d1ca43c377031f29b6e951 EsqueleSquad group published nearly 6000 malicious PyPi and NPM packages, executing spyware and information-stealing malware...

Malicious code in tpccintelcontrol (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx 1fee18d2166094274a4a1bbc82bde2c8f364a612a1286e4361139bec515a8e10 EsqueleSquad group published nearly 6000 malicious PyPi and NPM packages, executing spyware and information-stealing malware...

Malicious code in tprandrehttp (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx ca2ac24a456ab6a9728c2a4737007bae83448d7e808207810f84e9ed0c4bad18 EsqueleSquad group published nearly 6000 malicious PyPi and NPM packages, executing spyware and information-stealing malware...

Malicious code in selfvergetcc (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx a7f1a1094659f78de6cca94da79baa87e0c43037265723fbb2e78f0b12a31629 EsqueleSquad group published nearly 6000 malicious PyPi and NPM packages, executing spyware and information-stealing malware...

Malicious code in esqmaskstringping (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx 6dd11e89f86ea34ff8e3f354a3f5c62cd4047a7fe864c9c469ce25c4da25bc08 EsqueleSquad group published nearly 6000 malicious PyPi and NPM packages, executing spyware and information-stealing malware...

Malicious code in selfsuperstrpaypal (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx c2744adbc3a0e48a52b341b19bb00f50322a7f1bc0c7ae906de6ade86c1a6b1c EsqueleSquad group published nearly 6000 malicious PyPi and NPM packages, executing spyware and information-stealing malware...

Malicious code in libpaypalhackedlgtb (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx 09fe30dc7f1ee122013b8b189af5d2189f0b106b9b876a5fa48819228134d23f EsqueleSquad group published nearly 6000 malicious PyPi and NPM packages, executing spyware and information-stealing malware...

Malicious code in tpcvadgrand (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx 2706f360c93209086c6dfb63cd221e9f95da1dd5f6c6b577df90ee718b9338cc EsqueleSquad group published nearly 6000 malicious PyPi and NPM packages, executing spyware and information-stealing malware...

Malicious code in py-mineencodeosint (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx 80ee6cd2b683b658bf0c3215366012f17e2d977ecbea9dd0811a8ad097b267f0 EsqueleSquad group published nearly 6000 malicious PyPi and NPM packages, executing spyware and information-stealing malware...

Malicious code in py-toolpaypalhydra (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx b5d1f70669ee3676250ca5e83230b727cd5d66f26cbc1c4b4fbc7414f634e16f EsqueleSquad group published nearly 6000 malicious PyPi and NPM packages, executing spyware and information-stealing malware...

Malicious code in selfpipvisaload (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx 89a23da4196bd76cdb974e6a569d65db416a9e53e5a5eac3dec02063433b5f0d EsqueleSquad group published nearly 6000 malicious PyPi and NPM packages, executing spyware and information-stealing malware...