294286 matches found
Malicious code in jabbah-prettier-plugin-markdown-dotenv-betelgeuse (npm)
Source: amazon-inspector 9f2d658f8b51340fa2613ed1642613bc96cf0ed9fedc8ea3dc4ca392be6f3472 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...
Malicious code in jabbah-antares-protractor-html-webpack-plugin (npm)
The package jabbah-antares-protractor-html-webpack-plugin was found to contain malicious code. --- Credit: OpenSSF source...
Malicious code in izar-sails-eslint-plugin-bootstrap (npm)
Source: amazon-inspector 5795e8e9e7b64dd726d1a7c4d0abe9e021363d84b51f5fe638d0ed59ae3c16d3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...
Malicious code in izar-mini-css-extract-plugin-hercules-nightmare (npm)
Source: amazon-inspector b6536a29dfab966492b09b2edeb0b4ae69f3011304e1a35a5d640f66472abbb9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...
Malicious code in iota-terser-webpack-plugin-hermes-postcss (npm)
The package iota-terser-webpack-plugin-hermes-postcss was found to contain malicious code. --- Credit: OpenSSF source...
Malicious code in iota-terser-webpack-plugin-grus-izar (npm)
Source: amazon-inspector 10abff946e2ae825d509d9a300c2f107985df4ded65d09d1779b1008c569194d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...
Malicious code in iota-publish-farout-terser-webpack-plugin (npm)
Source: amazon-inspector e5af19c1d6f08e7ef2fd2f4ffea93902babce362354f088e98f6484d66559a40 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...
Malicious code in iot-gateway-plugin-rtls (npm)
The package iot-gateway-plugin-rtls was found to contain malicious code. --- Credit: OpenSSF source...
Malicious code in ionosphere-prettier-plugin-markdown-yonder-chai (npm)
The package ionosphere-prettier-plugin-markdown-yonder-chai was found to contain malicious code. --- Credit: OpenSSF source...
Malicious code in io-eslint-plugin-yonder-unuk (npm)
Source: amazon-inspector 55f1228c8a0e8e5f1e992545733045dd7f98234974ca9ca788f347f162434515 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...
Malicious code in internal-plugin-lifecycle-card (npm)
Source: ossf-package-analysis 332aa89488a5ecb7012588f98648ef97de374565f906dfc69ff80d4d344e9a03 The OpenSSF Package Analysis project identified 'internal-plugin-lifecycle-card' @ 99.9.10 npm as malicious. It is considered malicious because: - The package communicates with a domain associated with...
Malicious code in instant-plugin (npm)
--- Credit: OpenSSF source...
Malicious code in install-mini-css-extract-plugin-test-sqlite (npm)
Source: amazon-inspector 12d47c46e0374aed5c5f7d4341c5a6a16c64a371572dcd61558df3ac91e327c2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...
Malicious code in inquirer-prettier-plugin-markdown-writable-fomalhaut (npm)
Source: amazon-inspector aba576cee921af273a381ecdd9f50e7948d25e4e33e507595011c39819ada9e9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...
Malicious code in inquirer-optimize-css-assets-webpack-plugin-umbra-repository (npm)
Source: amazon-inspector 4b6e103bdf6239a1f4ae1ea1b859a0de9a6bbafe30cb680fe33b95e1adacff57 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...
Malicious code in init-optimize-css-assets-webpack-plugin-nodejs-grus (npm)
Source: amazon-inspector 70dc2863be0d9933feb9f50a9c64d52707a31a7128d733acb26dcaf70e489128 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...
Malicious code in ini-sirius-ursa-prettier-plugin-markdown (npm)
Source: amazon-inspector c66192a4c2d85e47773b11e7fb2e2aa20818e70a0701268640be7ec5ad95c09e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...
Malicious code in ini-rollup-plugin-gulp-semantic-ui (npm)
Source: amazon-inspector b9860e43f28b0ece8e3c8d36b595e5eee206c686e720066e2a8d028415cf4327 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...
Malicious code in ini-duplex-mini-css-extract-plugin-stream (npm)
Source: amazon-inspector ca689f742b94ba4a8fd5eb5c63fabe4993fa211a15abc1805caa3180a7eb351c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...
Malicious code in inflation-technocracy-css-minimizer-webpack-plugin-await (npm)
Source: amazon-inspector 6244e10eda00ad2d9444aebb4f031c9cf8fb0640f0fcaa288d88ee353d09b560 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...