Malicious code in rinto-poke120 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1662c43d1cc039cc31874876994316b068d5e657840cb4441d6e987b4be25d5e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in esqverramstr (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx 2ea2807978872ee2e21c69ab4cf9d09d7b1d765cb298db9c086fd50f65f04caa EsqueleSquad group published nearly 6000 malicious PyPi and NPM packages, executing spyware and information-stealing malware...