Malicious code in dependent-final (npm)

Part of a self-republishing campaign: the package ships test.js, which in a loop gives the package a new random name, bumps its version, rewrites package.json and runs npm publish to publish the package again under the new name. Self-replicating publication is the propagation step of a registry...

Malicious code in wet_rat_replicate_automation (npm)

Part of a self-republishing campaign: the package ships autopublish2.js, which in a loop gives the package a new random name, bumps its version, rewrites package.json and runs npm publish to publish the package again under the new name. Self-replicating publication is the propagation step of a...

Malicious code in quiche-tea-curut (npm)

Part of a self-republishing campaign: the package ships autopublish2.js, which in a loop gives the package a new random name, bumps its version, rewrites package.json and runs npm publish to publish the package again under the new name. Self-replicating publication is the propagation step of a...

Malicious code in low_hummingbird_replicate_automation (npm)

Part of a self-republishing campaign: the package ships autopublish3.js, which in a loop gives the package a new random name, bumps its version, rewrites package.json and runs npm publish to publish the package again under the new name. Self-replicating publication is the propagation step of a...

Malicious code in related_blackbird-toolteadev (npm)

Part of a self-republishing campaign: the package ships auto.js, which in a loop gives the package a new random name, rewrites package.json and runs npm publish to publish the package again under the new name. Self-replicating publication is the propagation step of a registry worm and fills the...

Malicious code in unemployed_xerinae-toolteadev (npm)

Part of a self-republishing campaign: the package ships auto.js, which in a loop gives the package a new random name, rewrites package.json and runs npm publish to publish the package again under the new name. Self-replicating publication is the propagation step of a registry worm and fills the...

Malicious code in maila-talijah-alpha-128 (npm)

Part of a self-republishing campaign: the package ships loop.js, which in a loop gives the package a new random name, bumps its version, rewrites package.json and runs npm publish to publish the package again under the new name. Self-replicating publication is the propagation step of a registry...

Malicious code in peas-tea-curut (npm)

Part of a self-republishing campaign: the package ships autopublish2.js, which in a loop gives the package a new random name, bumps its version, rewrites package.json and runs npm publish to publish the package again under the new name. Self-replicating publication is the propagation step of a...

Malicious code in itchy_gecko_magenta-98 (npm)

Part of a self-republishing campaign: generated names of the form -, each package shipping the same autopublish.js, which runs npm publish --access public to publish the package again. Self-replicating publication is the propagation step of a registry worm and fills the registry with copies...

Malicious code in pure_opossum_amaranth-54 (npm)

Part of a self-republishing campaign: generated names of the form -, each package shipping the same autopublish.js, which runs npm publish --access public to publish the package again. Self-replicating publication is the propagation step of a registry worm and fills the registry with copies...

Malicious code in unfortunate_crawdad_emerald-79 (npm)

Part of a self-republishing campaign: generated names of the form -, each package shipping the same autopublish.js, which runs npm publish --access public to publish the package again. Self-replicating publication is the propagation step of a registry worm and fills the registry with copies...

Malicious code in valid_antlion_amber-50 (npm)

Part of a self-republishing campaign: generated names of the form -, each package shipping the same autopublish.js, which runs npm publish --access public to publish the package again. Self-replicating publication is the propagation step of a registry worm and fills the registry with copies...

Malicious code in intimate_ostrich_amethyst-45 (npm)

Part of a self-republishing campaign: generated names of the form -, each package shipping the same autopublish.js, which runs npm publish --access public to publish the package again. Self-replicating publication is the propagation step of a registry worm and fills the registry with copies...

Malicious code in temporary_smelt_lavender-81 (npm)

Part of a self-republishing campaign: generated names of the form -, each package shipping the same autopublish.js, which runs npm publish --access public to publish the package again. Self-replicating publication is the propagation step of a registry worm and fills the registry with copies...

Malicious code in specific_sheep_violet-22 (npm)

Part of a self-republishing campaign: generated names of the form -, each package shipping the same autopublish.js, which runs npm publish --access public to publish the package again. Self-replicating publication is the propagation step of a registry worm and fills the registry with copies...

Malicious code in motionless_mandrill_blush-51 (npm)

Part of a self-republishing campaign: generated names of the form -, each package shipping the same autopublish.js, which runs npm publish --access public to publish the package again. Self-replicating publication is the propagation step of a registry worm and fills the registry with copies...

Malicious code in smooth_angelfish_emerald-54 (npm)

Part of a self-republishing campaign: generated names of the form -, each package shipping the same autopublish.js, which runs npm publish --access public to publish the package again. Self-replicating publication is the propagation step of a registry worm and fills the registry with copies...

Malicious code in xenacious_kangaroo_blush-47 (npm)

Part of a self-republishing campaign: generated names of the form -, each package shipping the same autopublish.js, which runs npm publish --access public to publish the package again. Self-replicating publication is the propagation step of a registry worm and fills the registry with copies...

Malicious code in inadequate_earwig_magenta-66 (npm)

Part of a self-republishing campaign: generated names of the form -, each package shipping the same autopublish.js, which runs npm publish --access public to publish the package again. Self-replicating publication is the propagation step of a registry worm and fills the registry with copies...

Malicious code in hollow_wildebeest_silver-94 (npm)

Part of a self-republishing campaign: generated names of the form -, each package shipping the same autopublish.js, which runs npm publish --access public to publish the package again. Self-replicating publication is the propagation step of a registry worm and fills the registry with copies...