Malicious code in lacerta-style-loader-mini-css-extract-plugin-less (npm)

Source: amazon-inspector 222914e44e98bf610164e7ab4d3b3240a1bf355716c59e8661864f5d3de0ffc6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

Malicious code in lacerta-eris-altair-terser-webpack-plugin (npm)

The package lacerta-eris-altair-terser-webpack-plugin was found to contain malicious code. --- Credit: OpenSSF source...

Malicious code in kupo-app-secure-store-plugin (npm)

Source: ossf-package-analysis d04ed47c7e296896a93ec11ccbe851b0a3d33f3afe06d2aaba32be6263363a33 The OpenSSF Package Analysis project identified 'kupo-app-secure-store-plugin' @ 99.0.0 npm as malicious. It is considered malicious because: - The package communicates with a domain associated with...

Malicious code in kronos-gridsome-eslint-plugin-forever (npm)

Source: amazon-inspector d49831c60df02a4ec563dc66764d272a886cb44223adb4887a15af6b9ab643b4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

Malicious code in kronos-apollo-changelog-eslint-plugin (npm)

Source: amazon-inspector 79df635064750b12fad3f8cd2dad32e8df6e3422782ac162ad599d7e8a5a5c1f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

Malicious code in koa-uglify-js-css-minimizer-webpack-plugin-tectonophysics (npm)

The package koa-uglify-js-css-minimizer-webpack-plugin-tectonophysics was found to contain malicious code. --- Credit: OpenSSF source...

Malicious code in koa-eslint-plugin-corvus-dotenv-parse-variables (npm)

Source: amazon-inspector f9921124b23b8c3333632e1a5ad8852823bbc42e2f37bc4ab4272265763d84cc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

Malicious code in kinetic-redshift-pino-pretty-prettier-plugin-markdown (npm)

Source: amazon-inspector dc08c74512f80ad9474b8e13de27f4105b05a1590682da5b2a2e30c210123222 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

Malicious code in kinetic-mini-css-extract-plugin-winston-spectron (npm)

Source: amazon-inspector 1a22880454f6c3b89cc13ee3e15c29aca4689483d59fc2695a5b325d74267ae4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

Malicious code in kinetic-mongodb-lepton-rollup-plugin (npm)

The package kinetic-mongodb-lepton-rollup-plugin was found to contain malicious code. --- Credit: OpenSSF source...

Malicious code in kaus-materialize-event-prettier-plugin-markdown (npm)

Source: amazon-inspector 4be0d8cef8cb791f6a09503be56fe69966c6977962c7e63fbb1283afe25dc0a4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

Malicious code in karma-heka-shelljs-css-minimizer-webpack-plugin (npm)

Source: amazon-inspector 4a1321402d373619ab428b9424583b9f795bb5713d9ceb5a919bcf553760974a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

Malicious code in karma-deneb-eslint-plugin-public (npm)

Source: amazon-inspector ca28c4630f7069c8ff7f629c225a8554f422bf681c109a76cdbaabb1cc4edb4c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

Malicious code in kapsel-plugin-i18n (npm)

The package kapsel-plugin-i18n was found to contain malicious code. --- Credit: OpenSSF source...

Malicious code in jupiter-scripts-html-webpack-plugin-blitz (npm)

Source: amazon-inspector 31eee506ff144bca2954b06b2cc81c5b33023ff8cff1b6cc66e7722a2f83da7a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

Malicious code in jupiter-xanadu-optimize-css-assets-webpack-plugin-cressida (npm)

Source: amazon-inspector fe2af6812199247ede8e24f95898a6078f72f1f090e8bf50ecf30c6f91ca063d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

Malicious code in juno-eslint-plugin-webdriver-mocha-start (npm)

Source: amazon-inspector 8918b440c334ac959b4a14cb31973b6672f8c32b5b293ca8a93e02c1f0d77725 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

Malicious code in juicer-plugin (npm)

The package juicer-plugin was found to contain malicious code. --- Credit: OpenSSF source...

Malicious code in jsonp-charon-jasmine-prettier-plugin-markdown (npm)

Source: amazon-inspector 71238e390649e49d2401aaea0455dc7e0bb1a22fac50887ed8c53667113553e8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

Malicious code in jsonp-html-webpack-plugin-epimetheus-spica (npm)

Source: amazon-inspector ad6b48ce6c4a45cb2fcc599034b019f71452bdb46a97116784b1fd1d4b5b2e1c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...