Malicious code in helmet-mui-eslint-plugin-webdriver-mocha (npm)

Source: amazon-inspector 9a3ecfc9ebd051b1684c5e2b349a06ee960d316c0caadbaed438ddd4fc9bd863 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

Malicious code in helios-ultra-rollup-plugin-gridsome (npm)

The package helios-ultra-rollup-plugin-gridsome was found to contain malicious code. --- Credit: OpenSSF source...

Malicious code in helios-html-webpack-plugin-colors-achernar (npm)

Source: amazon-inspector 15ca9906844a152840e647de99226967674d883cd6fd3e8fa73c798a11b93d04 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

Malicious code in heliophysics-sedimentology-paleoclimatology-css-minimizer-webpack-plugin (npm)

The package heliophysics-sedimentology-paleoclimatology-css-minimizer-webpack-plugin was found to contain malicious code. --- Credit: OpenSSF source...

Malicious code in heliophysics-comet-rollup-plugin-commitlint-config-angular (npm)

The package heliophysics-comet-rollup-plugin-commitlint-config-angular was found to contain malicious code. --- Credit: OpenSSF source...

Malicious code in heka-nebula-rollup-plugin-inquirer (npm)

Source: amazon-inspector d27d54fb6425d7716f20259ac15707ab8354e139d9a713e31dd0d222e2275140 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

Malicious code in heka-express-axios-eslint-plugin (npm)

Source: amazon-inspector d33e9feb5948da23cbdf036738822ea99bdbb64939a1ec88089a7d78643a419d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

Malicious code in heka-exec-terser-webpack-plugin-start (npm)

Source: amazon-inspector 459a8911d404ea550d39c9a03962c94d442f59f3731ba158658f93ea0e9d1729 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

Malicious code in heka-mini-css-extract-plugin-xenos-prompts (npm)

Source: amazon-inspector b17a7f1db0e8cf65d171b6b053a9b54a88580fcb443ea927debda2adbfaa55a2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

Malicious code in heft-example-plugin-02 (npm)

Source: ossf-package-analysis 6f52fccc098ff9fe7c2f46b5653ed058f4f080380c5de5ab9943c413c30f1ee8 The OpenSSF Package Analysis project identified 'heft-example-plugin-02' @ 99.0.9 npm as malicious. It is considered malicious because: - The package communicates with a domain associated with malicious...

Malicious code in heft-example-plugin-01 (npm)

Source: ossf-package-analysis 38de8533a1fa4ae454f1c4c690239b429820ddf54aa69925be16c418d54f6a2b The OpenSSF Package Analysis project identified 'heft-example-plugin-01' @ 99.0.9 npm as malicious. It is considered malicious because: - The package communicates with a domain associated with malicious...

Malicious code in heft-parameter-plugin (npm)

Source: ossf-package-analysis 6082dd30329215006112f50c3006a58f4437a48913646c4551e68d48e2d768e7 The OpenSSF Package Analysis project identified 'heft-parameter-plugin' @ 99.0.9 npm as malicious. It is considered malicious because: - The package communicates with a domain associated with malicious...

Malicious code in heft-example-lifecycle-plugin (npm)

Source: ossf-package-analysis fce75dcff1360927b5ed18017c2b53424afe03e0c1f53f13505883d9fe23fd55 The OpenSSF Package Analysis project identified 'heft-example-lifecycle-plugin' @ 99.0.9 npm as malicious. It is considered malicious because: - The package communicates with a domain associated with...

Malicious code in haraka-plugin-footer (npm)

The package haraka-plugin-footer was found to contain malicious code. --- Credit: OpenSSF source...

Malicious code in hapi-impulse-dotenv-parse-variables-prettier-plugin-markdown (npm)

Source: amazon-inspector 47665784ad522eb04cacf6b2f03e8ae0ac57786dd4012aa6cff0c9b286a13ecc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

Malicious code in hapi-terser-webpack-plugin-cz-conventional-changelog-despina (npm)

The package hapi-terser-webpack-plugin-cz-conventional-changelog-despina was found to contain malicious code. --- Credit: OpenSSF source...

Malicious code in hapi-charon-prettier-plugin-markdown-aquarius (npm)

Source: amazon-inspector b7e7e91d4a997d8e612394d189efa0a0befcc5026cc5b99a3fe32f91a842b1a0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

Malicious code in halley-eclipse-mini-css-extract-plugin-nightwatch (npm)

The package halley-eclipse-mini-css-extract-plugin-nightwatch was found to contain malicious code. --- Credit: OpenSSF source...

Malicious code in halley-eslint-plugin-google-phoenix (npm)

Source: amazon-inspector 4c1a1bbe19c10c90b8a467eb1130aba1a148edc3bb3b8ea42919a5377f413741 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

Malicious code in halley-auth-vega-eslint-plugin (npm)

Source: amazon-inspector c9e198bf855eb0b039d2d08b024a85c30d227cbd2fc6698801a6f92c2a987080 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...