Malicious code in @cloudplatform-single-spa/vcenter-virtual-machines (npm)

Part of a dependency confusion attack campaign targeting the @cloudplatform-single-spa and @mlspace npm scopes. The attacker npm user mr.4nd3r50n published 139 scoped packages at the inflated version 99.99.99, which resolves ahead of any private registry version via npm's default version...

Malicious code in sahu-sautug-infarudi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 87a8db00ca587774572e1315148eddcf806815a47fef6d84357ed2a78f0d2d37 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hadi-ruwet41-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a920bf8c876d6b7b3847c6756e67671c2c3fdf3b5fb01b48ce1c1e8a6b65e709 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...