Malicious code in disturbing_rooster_z3n (npm)

Source: amazon-inspector bdc4661837a90d92fd5473e343b7b8bf8503bca57cab49c4adb192d587ae256d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

Malware in @jacksher/install-exec-poc

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

Malicious code in doubtful_pheasant_brown-87 (npm)

Source: amazon-inspector 201b26ae2f321564833d75bc4f16adf718da3276ce81a436fc2dd89f3320f4fd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

Malicious code in dotenv-parse-variables-nightmare-aether-run-script (npm)

Source: amazon-inspector 293766d85f705540910cf4c7fa5b34fed1ce2705dab395aa9b0d51f30ed0ce72 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

Malicious code in dotenv-parse-variables-init-child-process-genomics (npm)

Source: amazon-inspector 98640b4344bddcf7df3cfc9d3664fa0d315971b9d3d25520d63786b5a4be8e0c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

Malicious code in dono-toge69-miaww (npm)

Source: amazon-inspector 81ab9eabd768327170436a5a5d45dffe5490aebc42c9a155e89317579084bcb2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

Malicious code in dono-mendut72-sukiwir (npm)

Source: amazon-inspector 5ec80d6ac9676eba04ea13843591b36a059d4615a72201a8b48aa84a91af3b03 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

Malicious code in dono-naget9-apidev (npm)

Source: amazon-inspector 8d28585bf2822f65813be4ce8aac0fe504a94f70f6d829eefd2895ea96402c98 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

Malicious code in dono-lutis46-sukiwir (npm)

Source: amazon-inspector d363d44f09b552dc64ac5767a1906db8fbe962d2c40fefdb148e0e6ca590f1a5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

Malicious code in dono-ikan25-sukiwir (npm)

Source: amazon-inspector 347747fb15b65dbd54ef224cd8cb0dfc56b25855ced67a231439dc1403877ddc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

Malicious code in docusaurus-oberon-test-concurrently (npm)

The package docusaurus-oberon-test-concurrently was found to contain malicious code. --- Credit: OpenSSF source...

Malicious code in diva-tugfai-imagivaga (npm)

Source: amazon-inspector 68bdaf4d3ead9e5342127bc75e12f205d5691f56a6a5c23bf62febba5fa6a9d4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

Malicious code in diva-banubot-imubgr (npm)

Source: amazon-inspector 12e85b8857388a81bc4d3a3c7639b0ba369fd9092de6cf47947b9ba6768f26bb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

Malicious code in disciplinary_swallow_z3n (npm)

Source: amazon-inspector 29a06e93d2060683cb92888d86755a667de0e209948ec9fe651d7291928e0480 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

Malicious code in diplomatic_caribou_beige-67 (npm)

Source: amazon-inspector b878a7cb34ab8ff12422863f3421f6df0ab88690b2f9d81a1ecd6b5dd3a93f63 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

Malicious code in dian-poke50 (npm)

Source: amazon-inspector b424579a5bb888f41798dad08f35c73f3757b03628abfb92909b0782382370e4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

Malicious code in dia-32 (npm)

Source: amazon-inspector abc8c7af238d58b1a789ef617f02c95fc53758cae3f37fbe1f04662590bf4bbe This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

Malicious code in dhchukyso (npm)

The package dhchukyso was found to contain malicious code. --- Credit: OpenSSF source...

Malicious code in dewi-gembus58-riris (npm)

Source: amazon-inspector 8d7d8303ec84126fde0e1e60e596c314f343156f4280c45bba48417bfc49b1e4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

Malicious code in dewanto-miemee69-sukiwir (npm)

Source: amazon-inspector bf6a47732e27d25447ea7c723b573bbfa1191f6e5c366fc91edebdb6a0c79ccf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

Malicious code in dewanto-mendoan46-breki (npm)

The package dewanto-mendoan46-breki was found to contain malicious code. --- Credit: OpenSSF source...

Malicious code in dewanto-empal93-sluey (npm)

Source: amazon-inspector ccaea24e3f2955206bd705cfcd0709d54e495beb516aec771c45384c3ec8097d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

Malicious code in delta-grape-uniform-wqltg (npm)

The package delta-grape-uniform-wqltg was found to contain malicious code. --- Credit: OpenSSF source...

Malicious code in deliberate-plum-skunk (npm)

Source: amazon-inspector d0977b0be60a202d6807a06128154074339b8b1264fe6db58d63ad56425400d3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

Malicious code in deimos-babel-callisto-algol (npm)

Source: amazon-inspector 4dc01994de9ac0f3c9e8b834ecd334693337ec9532aad21b65cd517f159f6c45 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

Malicious code in defeated-blue-antelope (npm)

Source: amazon-inspector 4d947d5ff9fa98a2a402c8f0f1f39d85659a2e50f6b414cc48210c69253320a8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

Malicious code in deeperscan-nft (npm)

--- Credit: OpenSSF source...

Malicious code in decentraland-credits-squid (npm)

The package decentraland-credits-squid was found to contain malicious code. --- Credit: OpenSSF source...

Malicious code in date-echo-xvcv (npm)

The package date-echo-xvcv was found to contain malicious code. --- Credit: OpenSSF source...

Malicious code in dark_seahorse_z3n (npm)

Source: amazon-inspector bddbedaf0d3a454f0883fa4bb318fe4b043e2301451963a0cc1c1554165f8a91 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

Malicious code in damaged_dragon_0xrequest (npm)

Source: amazon-inspector 153ff4f395f35a50a7066b01618b65abdab5126f1efb8026476cf383dcec4fe1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

Malicious code in dajouka-ssaa-t13a (npm)

Source: amazon-inspector e498a2fee9e1fea8b7c9745125f513b6833d091922af435a8ddf5d294a580c6f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

Malicious code in dajouka-d-uftac (npm)

Source: amazon-inspector 40d2fa4762e66081471b146ba30ced6ca1b5451b772316d9278627b6c46025f7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

Malicious code in d58kww (npm)

The package d58kww was found to contain malicious code. --- Credit: OpenSSF source...

Malicious code in cygnus-atlas-juno-phenomic (npm)

Source: amazon-inspector c847e0f9815963114519ef959cc97a76ea2888b07251d662b2455677ef620e8e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

Malicious code in cute_lizard_z3n (npm)

Source: amazon-inspector ab0ad08d293dbd9f82403b78435a606a416e60e1ef83c7a91f426c958984500c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

Malicious code in curly_marmot_replicate_automation (npm)

Source: amazon-inspector b8f05c9d9ef9ada50eef2d13d78e924d11461c6d50a4e144539cfdb80ca45a84 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

Malicious code in cssnapapp (npm)

The package cssnapapp was found to contain malicious code. --- Credit: OpenSSF source...

Malicious code in cryptography-dagda-mini-css-extract-plugin-jabbah (npm)

The package cryptography-dagda-mini-css-extract-plugin-jabbah was found to contain malicious code. --- Credit: OpenSSF source...

Malicious code in crucial_tarantula_z3n (npm)

Source: amazon-inspector 46736a3432ccb5d741534934fe08faad60623ca9e9bd830279dcb57f4fbda481 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

Malicious code in cross-env-ganymede-leda-markdown-pdf (npm)

Source: amazon-inspector e4ba82946028f26ae50bed848a88471cb5a5be888135ced1523e3e5774ad9f74 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

Malicious code in jaja-getas88-sluey (npm)

Source: amazon-inspector 5bb2f23832f185736f93e656d450cd8a562dfcac19eebc1b2e10722754df2008 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

Malicious code in jaja-bika67-remi (npm)

Source: amazon-inspector 1e5b1ab45ac50fcf5de2f1cfe6415f565decbe3072ba00c97174f712aa399535 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

Malicious code in etoro-builders (npm)

Source: amazon-inspector c9210fb131a2f661ae1d656fa461d45c6c54377179aecba06e6a07b4f357a00b The package's preinstall lifecycle script preinstall.js reads the installer's OS hostname, username, and current working directory via os.hostname, os.userInfo.username, and process.cwd, encodes them into a...

Malicious code in etoro-api (npm)

Source: amazon-inspector ab6228f994962694d4434f53d20d6a5a1b877b39a3498236327da9d0385284d9 The preinstall lifecycle script in [email protected] preinstall.js auto-executes on npm install and performs an HTTP GET to a hardcoded bare-IP endpoint at...

Malware in @auction-fe/base

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

Malicious code in mfaby (npm)

Source: amazon-inspector c278e0ee3820cf701ef7ad65dfdab43a0765e5d3423286de99d3301fe39a8455 The package presents itself as a Discord MFA helper, but its cache module contains a warmSession routine that decodes a base64-encoded string CDNBASE into the URL...

Malware in krdpass-auth-react-native

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

Malware in cb-wallet-solana-provider

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

Malicious code in drunk-tan-cicada (npm)

Source: amazon-inspector 397dee4b2b12b0e455c33c3cb6ca1cc2839d7b72e2254b887dc77ce8d5a1622b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...