Malicious code in child-process-metalsmith-sadr-nextjs (npm)

Source: amazon-inspector 648b1d5ebad02068378ea6e0e761e2874183d1ea7650bde36d994a2781348832 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

Malicious code in child-process-framework-metalsmith-celeste (npm)

Source: amazon-inspector 849be0aae93e5cfbd3e6a735ee71094677ea146394d513afeaba71ce013d555d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

Malicious code in child-process-fornax-ophiuchus-enceladus (npm)

Source: amazon-inspector e62e14ba578f9389f96c9befb8dff2098b3c6d0e1be62aca0d7dfb57d570ef2b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

Malicious code in child-process-registry-chai-nashira (npm)

Source: amazon-inspector f5d5e0a4c75e7e750b51f9106f6d21cbf53719ee3b880b06dc02013b87e745c5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

Malicious code in child-process-concurrently-chakra-ui-node-sass (npm)

Source: amazon-inspector 66acf8a52ab5f47e31e87daa88e9ccc679f3580c46543cd05ee50741b3f97448 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

Malicious code in child-process-uninstall-mui-dactyl (npm)

Source: amazon-inspector dd0a4ab535415e7969122a4e850655975bffc86aac04bc53f23d054c1f9da397 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

Malicious code in child-process-blitz-spawn-wasat (npm)

Source: amazon-inspector 352192e625655a62b387104ffb60a5f639784d2858a0800691396d8f61c4b31b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

Malicious code in child-process-charon-mui-on (npm)

Source: amazon-inspector ee5e948049c8cfee3a492e90195667a71b6c916914451d1fdfaa8ec56a48d7c9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

Malicious code in child-process-lint-staged-less-style-loader (npm)

Source: amazon-inspector f62ba95efd3f3ef97d0e9b721dde58dd83c79c4eac6b6f8b08e9fb792462089a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

Malicious code in child-process-query-sagitta-chakra-ui (npm)

The package child-process-query-sagitta-chakra-ui was found to contain malicious code. --- Credit: OpenSSF source...

Malicious code in child-process-eridanus-cypress-zephyr (npm)

Source: amazon-inspector 2052a0a86d5712791f1bcaf79b700a6a9e92e85eece452bd875120b46a08accc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

Malicious code in child-process-mini-css-extract-plugin-carina-tailwindcss (npm)

Source: amazon-inspector 0600f861e5c7c831867f5d513940f33a86c60daf9f02ae87e935468a6bb3d6e9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

Malicious code in child-process-asthenosphere-callisto-eventhoriz (npm)

The package child-process-asthenosphere-callisto-eventhoriz was found to contain malicious code. --- Credit: OpenSSF source...

Malicious code in child-process-prettier-stylelint-draco-vuepress (npm)

Source: amazon-inspector dea45ccf54817bfe9ee066a4fe4e3c2af6be163030e91e326a052c31613b861d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

Malicious code in child-process-miranda-enif-nightwatch (npm)

Source: amazon-inspector 449b12ea44d1088d4d1c3ce7d03a217f14aaee1ae74cd8d63c96d1fb16916fdd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

Malicious code in child-process-rigel-soap-comet (npm)

The package child-process-rigel-soap-comet was found to contain malicious code. --- Credit: OpenSSF source...

Malicious code in child-process-dotenv-antares-dione (npm)

Source: amazon-inspector 51ea11fe46221f15331cfdabd1b0fb5b2e15fdedf8e103e2aa4f98cd6ed4e4c9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

Malicious code in checkout-molecule-desktop-status-modal (npm)

Source: amazon-inspector be057846e34bed91c3f790d1c7d61a9720d8188c755a370ab9edb8f02b732247 The package's main entry index.js requires./polyfill on load. polyfill.js immediately runs an async routine that reconstructs several hostnames from character-array joins oob-worker.cf103-070.workers.dev,...

Malicious code in charon-semantic-release-nashira-child-process (npm)

Source: amazon-inspector ed1789d099d0d6d3fe818d8cd16de7c18e8f8e48875e2d04a981153d07e84bf9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

Malicious code in chariklo-gulp-sync-child-process (npm)

Source: amazon-inspector 8da4da04f9f6c5b6991dcb2017d11ee5925ffc8c98afb5519309453f5c30e25c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...