196808 matches found
Malicious code in dwsai-dwsai-core (npm)
Source: amazon-inspector 4d9ec945df21e9ec2a52fc5dccf5b2d8f734c53aba8c9b6bd14f515c8e4a4fc8 On require'dwsai-dwsai-core', index.js loads adapter.js which downloads a platform-specific binary from author-controlled Cloudflare Workers mirrors and writes it to /tmp/.cache on Linux/macOS or...
Malicious code in dwarf-dragonfruit-95wq (npm)
The package dwarf-dragonfruit-95wq was found to contain malicious code. --- Credit: OpenSSF source...
Malicious code in dutch_jackal_0xrequest (npm)
Source: amazon-inspector fd530be35afaf3c5ef21fa46d721365e01bbccbe04dda2bd3f02f18598b52b03 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...
Malicious code in duygusal (npm)
The package duygusal was found to contain malicious code. --- Credit: OpenSSF source...
Malicious code in dwarf-zamia-cpzy (npm)
The package dwarf-zamia-cpzy was found to contain malicious code. --- Credit: OpenSSF source...
Malicious code in dutch_heron_z3n (npm)
Source: amazon-inspector 9611a4313096cf86e6b1c1ad818792b0129509eaa6ece7998ab6855383a35645 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...
Malicious code in dutch_pony_maroon-22 (npm)
Source: amazon-inspector a941f5aa92d49967b677fb6e8ce066cc3fab22acdc38a5e615064a90792988b5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...
Malicious code in dutch_starfish_z3n (npm)
Source: amazon-inspector 94ca8a942df06b9afa82c3f1f74dbf356f50838a72af37cecce72f654f73a9ca This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...
Malicious code in dutch_toad_dumbs (npm)
Source: amazon-inspector 4a7238ca6d680f769730ade44db736fd2abb1e0492d2cf04310fb1dd04519194 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...
Malicious code in dutch_wildebeest_z3n (npm)
Source: amazon-inspector f87a33a30a5d19dd7bb9d73bf77b48026d6b3c8383a9b0dd2a8d72de7fa43a5c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...
Malicious code in dwhetlfront-dwhetlfront-core (npm)
Source: amazon-inspector fad333b1a33066fabeca9799bee065c5d6431467699a187a25d6ef56a9cbea7f On require of the package, index.js loads support.js which selects a platform-specific payload URL, downloads bytes from Cloudflare workers.dev hosts oob-worker.cf100-3-.workers.dev with a DNS-TXT...
Malicious code in duxton-web (npm)
--- Credit: OpenSSF source...
Malicious code in dwarf-jupiter-e8xo (npm)
The package dwarf-jupiter-e8xo was found to contain malicious code. --- Credit: OpenSSF source...
Malicious code in dutch_ermine_z3n (npm)
Source: amazon-inspector 0ef7194e6302aa2023e1e967e2a18488bf555bbd14f7a7d306b75b6264a2bac2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...
Malicious code in dwarf-carrot-9tr9 (npm)
The package dwarf-carrot-9tr9 was found to contain malicious code. --- Credit: OpenSSF source...
Malicious code in dw-api-mock2 (npm)
--- Credit: OpenSSF source...
Malicious code in dws-frontend-dws-frontend-core (npm)
Source: amazon-inspector 7fb73f65c18cf45f29f533ef6b9ab1278412909686c0750018f9d35170ed39f2 On require of this package, index.js loads support.js which downloads a platform-specific binary over HTTPS from author-controlled hosts under oob-worker.cf1.workers.dev with a DNS TXT-record base64 fallback...
Malicious code in dvehxm-devapptea (npm)
Source: amazon-inspector 0e64a8b409fe4fef1c761c30b71cf8a5fd02d703162eced98525ee2a7259e287 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...
Malicious code in dva-loading-hide-rce (npm)
The package communicates with a domain associated with malicious activity. Source: ossf-package-analysis 236bea5646a5f41a1a00049315bf89b5d58d75f522e1d1dbc8bbc86d85e10919 The OpenSSF Package Analysis project identified 'dva-loading-hide-rce' @ 1.0.0 npm as malicious. It is considered malicious...