Malicious code in heft-parameter-plugin (npm)

Source: ossf-package-analysis 6082dd30329215006112f50c3006a58f4437a48913646c4551e68d48e2d768e7 The OpenSSF Package Analysis project identified 'heft-parameter-plugin' @ 99.0.9 npm as malicious. It is considered malicious because: - The package communicates with a domain associated with malicious...

Malicious code in haraka-plugin-footer (npm)

The package haraka-plugin-footer was found to contain malicious code. --- Credit: OpenSSF source...

Malicious code in hapi-impulse-dotenv-parse-variables-prettier-plugin-markdown (npm)

Source: amazon-inspector 47665784ad522eb04cacf6b2f03e8ae0ac57786dd4012aa6cff0c9b286a13ecc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

Malicious code in hapi-terser-webpack-plugin-cz-conventional-changelog-despina (npm)

The package hapi-terser-webpack-plugin-cz-conventional-changelog-despina was found to contain malicious code. --- Credit: OpenSSF source...

Malicious code in hapi-charon-prettier-plugin-markdown-aquarius (npm)

Source: amazon-inspector b7e7e91d4a997d8e612394d189efa0a0befcc5026cc5b99a3fe32f91a842b1a0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

Malicious code in halley-auth-vega-eslint-plugin (npm)

Source: amazon-inspector c9e198bf855eb0b039d2d08b024a85c30d227cbd2fc6698801a6f92c2a987080 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

Malicious code in halley-eclipse-mini-css-extract-plugin-nightwatch (npm)

The package halley-eclipse-mini-css-extract-plugin-nightwatch was found to contain malicious code. --- Credit: OpenSSF source...

Malicious code in halley-eslint-plugin-google-phoenix (npm)

Source: amazon-inspector 4c1a1bbe19c10c90b8a467eb1130aba1a148edc3bb3b8ea42919a5377f413741 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

Malicious code in halley-chariklo-rollup-plugin-xenos (npm)

The package halley-chariklo-rollup-plugin-xenos was found to contain malicious code. --- Credit: OpenSSF source...

Malicious code in halley-auriga-prettier-plugin-markdown-rest (npm)

Source: amazon-inspector 121edc4555579663ed0cdd1b890a4798334cbc15d4f177d9d961e054c2b64395 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

Malicious code in halley-markdown-pdf-terser-webpack-plugin-dotenv-parse-variables (npm)

Source: amazon-inspector 4c8f8e6d03c3daf00589833a3797e608a89883125a45d9cff367282e9f6585f8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

Malicious code in gulp-rollup-plugin-carina-csv (npm)

Source: amazon-inspector 68bf9fcb09e12feb0d27fb4d36e938ec6bb40361ec9a2ab7c9eafbc28e56ebb8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

Malicious code in grus-prettier-plugin-markdown-babel-postgres (npm)

Source: amazon-inspector 92c00f4e6be82f73104ac4b5a4fd55b9981d7034b9a4fab5d5cb577c6985de63 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

Malicious code in grus-neutrino-html-webpack-plugin-cluster (npm)

Source: amazon-inspector 79a14acd51b16527de68df05b7eba63021818a88f6afa51641dce35a4440aa5f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

Malicious code in grus-private-quark-prettier-plugin-markdown (npm)

Source: amazon-inspector d16e13dec01cfb2b4640caf03ff44b0bc81c7783aa0631bc664936909d63ed3c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

Malicious code in grus-prosthetics-stream-prettier-plugin-markdown (npm)

Source: amazon-inspector c8349dbfa155f2d339ef3fd2ea67bde24011b09acb828ba410014298d1394d52 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

Malicious code in grunt-envconfig-bootes-eslint-plugin (npm)

Source: amazon-inspector 92f83987625a5b22f96ded6fb57b3a5b08594ac3a45b079c63a6905f3a226dce This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

Malicious code in grunt-geckodriver-puppeteer-optimize-css-assets-webpack-plugin (npm)

Source: amazon-inspector 57bc6f143e9582b48754cf9d7909df4b782c45d7c78a1fd54b06833089bb3c88 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

Malicious code in griffin-webpack-plugin (npm)

The package griffin-webpack-plugin was found to contain malicious code. --- Credit: OpenSSF source...

Malicious code in gridsome-eslint-plugin-neptune-quito (npm)

Source: amazon-inspector f05892523376040a7b321ac3278985edf9c519d65ebcbe687651dddf10f1f85d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...