Malicious Package

Overview link-pino-pretty-react-bootstrap-cordelia is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that...

Malicious code in link-pino-pretty-react-bootstrap-cordelia (npm)

Source: amazon-inspector 386846b5eb8ea17261166715d1b01f258c84fe3bd709898c4c45ac12b4038d21 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

Malicious code in levels-got-react-bootstrap-selenium (npm)

Source: amazon-inspector 5363bd2c5ca34ed6da0f38e5ce8bfd01cc4b3432a01f7c875401e1d2f2289dc7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

Malicious code in less-loader-react-bootstrap-cosmicray-spectroscopy (npm)

Source: amazon-inspector 34b22a3237ae7e67de2b1fded90e8aad83a6fa3a88ed44ce7d4329367a38aa5d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

Malicious code in lacerta-deneb-react-bootstrap-gravity (npm)

Source: amazon-inspector 8ee4a9712b532e871f7b4ddaa054d992da7855fe931e1bc6d0a47c71aa8e651e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

Malicious code in karma-fornax-react-bootstrap-draco (npm)

Source: amazon-inspector 692a2c9da87e3f2f27a132a25c2aa343f1b3f5c7d705d7a5a74fbdca38cf1da0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

Malicious code in jupiter-react-bootstrap-sedimentology-prettier-stylelint (npm)

The package jupiter-react-bootstrap-sedimentology-prettier-stylelint was found to contain malicious code. --- Credit: OpenSSF source...

Malicious code in juno-sirius-react-bootstrap-weywot (npm)

Source: amazon-inspector 1187ba054fc9b46477a91275100c1ebc2b34469d8a5e8314d2cfb9fe05d71488 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

Malicious code in janus-react-bootstrap-less-loader-biomimicry (npm)

The package janus-react-bootstrap-less-loader-biomimicry was found to contain malicious code. --- Credit: OpenSSF source...

Malicious code in ini-wasat-react-bootstrap-javascript (npm)

Source: amazon-inspector 37bcd35eba4a00c390477b1fbe300caa6a78526cf8dd7a566a6fbbf3720279f7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

Malicious code in impulse-react-bootstrap-gacrux-stream (npm)

Source: amazon-inspector eeeb91210fb4388357c7e75117778a2bbbfacf234dd1abd657a2fb9009212a46 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

Malicious code in hyperion-elara-weywot-react-bootstrap (npm)

Source: amazon-inspector 225d93c8b8508d557ec0c5fb31999f348b4063b97a74107c08f6586f25e1292d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

Malicious code in husky-ganymede-pm2-react-bootstrap (npm)

Source: amazon-inspector a4ae165c50206a4c6c2d4bfbf0d57465a55bd17853661b93f751e03903ea096b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

Malicious code in hugo-react-bootstrap-nestjs-andromeda (npm)

Source: amazon-inspector 3afec8441ea00da53d6434b7d12ff98efb7ce3e538f9991c06c260651f60ce95 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

Malicious code in hermes-celeste-react-bootstrap-nodejs (npm)

The package hermes-celeste-react-bootstrap-nodejs was found to contain malicious code. --- Credit: OpenSSF source...

Malicious code in heka-react-bootstrap-electron-builder-puppeteer (npm)

The package heka-react-bootstrap-electron-builder-puppeteer was found to contain malicious code. --- Credit: OpenSSF source...

Malicious code in heka-hercules-react-bootstrap-darkenergy (npm)

The package heka-hercules-react-bootstrap-darkenergy was found to contain malicious code. --- Credit: OpenSSF source...

Malicious code in gravity-react-bootstrap-commitlint-dynamo (npm)

Source: amazon-inspector cb22033e71a11b9b4e5ea920eae840ead86fee21e944aa895a89667612aee75e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

Malicious code in got-nightwatch-despina-react-bootstrap (npm)

Source: amazon-inspector 7336b107d179e0bff64553a286b8968070d2f42a5453b4c4ffc25c5a3be02ee7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

Malicious code in global-fornax-supervisor-react-bootstrap (npm)

Source: amazon-inspector c0acf146c879312a52c4a11dfd8019469b166ba992f23e25b1a184a8024ba6b9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...