38993 matches found
Malicious code in disturbing_rooster_z3n (npm)
Source: amazon-inspector bdc4661837a90d92fd5473e343b7b8bf8503bca57cab49c4adb192d587ae256d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...
Malicious code in d58kww (npm)
The package d58kww was found to contain malicious code. --- Credit: OpenSSF source...
Malicious code in jaja-getas88-sluey (npm)
Source: amazon-inspector 5bb2f23832f185736f93e656d450cd8a562dfcac19eebc1b2e10722754df2008 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...
Malicious code in doubtful_pheasant_brown-87 (npm)
Source: amazon-inspector 201b26ae2f321564833d75bc4f16adf718da3276ce81a436fc2dd89f3320f4fd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...
Malicious code in dotenv-cosmos-promise-css-minimizer-webpack-plugin (npm)
Source: amazon-inspector 57077612de819acf7cf711556c614e951a7d5f2f92fc0d3c785812dc62b803b3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...
Malicious code in dono-ikan25-sukiwir (npm)
Source: amazon-inspector 347747fb15b65dbd54ef224cd8cb0dfc56b25855ced67a231439dc1403877ddc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...
Malicious code in dono-ketan84-tititugel (npm)
Source: amazon-inspector c751a4b3e756915ce46ef5b88c5e4ffd50e28a184b6d50ae2e0d7e461a30b0bd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...
Malicious code in docusaurus-oberon-test-concurrently (npm)
The package docusaurus-oberon-test-concurrently was found to contain malicious code. --- Credit: OpenSSF source...
Malicious code in diva-tugfai-imagivaga (npm)
Source: amazon-inspector 68bdaf4d3ead9e5342127bc75e12f205d5691f56a6a5c23bf62febba5fa6a9d4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...
Malicious code in diplomatic-white-anglerfish (npm)
Source: amazon-inspector d3f793a60e4bd0e2dba27fb4a3eac8793279fcaf03eac9720be550393b0d165c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...
Malicious code in diago-kuli-luuvuk (npm)
Source: amazon-inspector cfc5ed58d05d0fe0d00a24fcd489868fefbc62293d42775484d6b58fdb9efea0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...
Malicious code in dia-32 (npm)
Source: amazon-inspector abc8c7af238d58b1a789ef617f02c95fc53758cae3f37fbe1f04662590bf4bbe This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...
Malicious code in dhchukyso (npm)
The package dhchukyso was found to contain malicious code. --- Credit: OpenSSF source...
Malicious code in dewi-gembus58-riris (npm)
Source: amazon-inspector 8d7d8303ec84126fde0e1e60e596c314f343156f4280c45bba48417bfc49b1e4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...
Malicious code in dewanto-mangga70-sukiwir (npm)
Source: amazon-inspector c11621ab469013615c6cef487760721657c1c177d0f8bba807b2d09bcc8b1622 The package dewanto-mangga70-sukiwir was found to contain malicious code. This package appears to be part of the tea.xyz token reward campaign that flooded npm with over 15,000 spam packages in 2024. These...
Malicious code in despina-build-chariklo-perseus (npm)
Source: amazon-inspector b2e69d006846d8007ebe2b881da6d8832c002a8bcc2fcdc0a56be2d7c4dc362a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...
Malicious code in desirable_minnow_z3n (npm)
Source: amazon-inspector 6f345bfe26fbb8348205739e47c22dfd39c11df25fb67630225d0b8b07a40617 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...
Malicious code in delivery-ci-upgrade-form (npm)
Source: amazon-inspector c49d0422f51d7d7937c6a2b133b12ac6f4c6f1b914f03e9a6ad558e1b0f09fce index.js unconditionally requires./runtime at module load. runtime.js detects platform/arch and downloads an OS-specific binary linuxx64, linuxarm64, darwin, win32 from string-split-obfuscated Cloudflare...
Malicious code in deliberate-plum-skunk (npm)
Source: amazon-inspector d0977b0be60a202d6807a06128154074339b8b1264fe6db58d63ad56425400d3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...
Malicious code in deimos-babel-callisto-algol (npm)
Source: amazon-inspector 4dc01994de9ac0f3c9e8b834ecd334693337ec9532aad21b65cd517f159f6c45 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...
Malicious code in deeperscan-nft (npm)
--- Credit: OpenSSF source...
Malicious code in decentraland-credits-squid (npm)
The package decentraland-credits-squid was found to contain malicious code. --- Credit: OpenSSF source...
Malicious code in dc-icons (npm)
Source: ossf-package-analysis e8689cb64586338ac8b83b329558cc7ebd7302602c033a5de1827e1ff8ceaf6e The OpenSSF Package Analysis project identified 'dc-icons' @ 1.0.0 npm as malicious. It is considered malicious because: - The package communicates with a domain associated with malicious activity. ---...
Malicious code in date-echo-xvcv (npm)
The package date-echo-xvcv was found to contain malicious code. --- Credit: OpenSSF source...
Malicious code in dajouka-d-uftac (npm)
Source: amazon-inspector 40d2fa4762e66081471b146ba30ced6ca1b5451b772316d9278627b6c46025f7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...
Malicious code in cygnus-atlas-juno-phenomic (npm)
Source: amazon-inspector c847e0f9815963114519ef959cc97a76ea2888b07251d662b2455677ef620e8e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...
Malicious code in cute_lizard_z3n (npm)
Source: amazon-inspector ab0ad08d293dbd9f82403b78435a606a416e60e1ef83c7a91f426c958984500c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...
Malicious code in csv-schema-alphard-taurus (npm)
Source: amazon-inspector 73a9b936ae6b74c7d7229c33b08bcb2aa9deea6014c2edfef4494e291ec250af This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...
Malicious code in crucial_tarantula_z3n (npm)
Source: amazon-inspector 46736a3432ccb5d741534934fe08faad60623ca9e9bd830279dcb57f4fbda481 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...
Malicious code in cosmiconfig-gemini-wolf-publish (npm)
Source: amazon-inspector b3bd12bb3be8b01b050f726a8cd093fee2c9c5ad5226ec9d820cc45f66dbdc44 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...
Malicious code in joko-klanting55-breki (npm)
Source: amazon-inspector fcd00e3a02dd3249203d511087599b3d08f8fa63ce46249bfe3d6ab12c008a12 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...
Malicious code in joko-kentang14-breki (npm)
Source: amazon-inspector 8e542de19a9375e05aa8df50657c547f57812f385c4accb701f791d47fa9879b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...
Malicious code in joko-kemplang79-breki (npm)
Source: amazon-inspector 8889936f8cb83e9915e4d719b806b45409385b9c270aa5bfadd2a49e3c18c7f2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...
Malware in @auction-fe/base
Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...
Malicious code in mfaby (npm)
Source: amazon-inspector c278e0ee3820cf701ef7ad65dfdab43a0765e5d3423286de99d3301fe39a8455 The package presents itself as a Discord MFA helper, but its cache module contains a warmSession routine that decodes a base64-encoded string CDNBASE into the URL...
Malware in @jacksher/install-exec-poc
Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...
Malicious code in drunk-tan-cicada (npm)
Source: amazon-inspector 397dee4b2b12b0e455c33c3cb6ca1cc2839d7b72e2254b887dc77ce8d5a1622b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...
Malicious code in drove-doll-bar (npm)
The package drove-doll-bar was found to contain malicious code. --- Credit: OpenSSF source...
Malicious code in driving_rooster_z3n (npm)
Source: amazon-inspector a7ef43a0e1d584c10b56d16bfc7ac2aa6818e56e7055c1b83ba2cb41417a4352 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...
Malicious code in drab_quail_z3n (npm)
Source: amazon-inspector f93645b9cf47a85338aec90ee17b80e675e8c96cf2316291cdd4e1f5097c3aa1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...
Malicious code in down_load_epub_the_perfumist_of_paris_kidm70 (npm)
--- Credit: OpenSSF source...
Malicious code in drab-pink-anaconda (npm)
Source: amazon-inspector d029d69e22033864d9bc744cf72cc375b6ee27a0107a163d527936d6e59e4370 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...
Malicious code in down_load_ebook_paris_era_una_fiesta_by_ernest_hemingway_tuvhq (npm)
--- Credit: OpenSSF source...
Malicious code in down_load_ebook_come_back_stronger_by_sophia_thiel_s4j40 (npm)
--- Credit: OpenSSF source...
Malicious code in down_load_ebook_come_uccidono_le_brave_ragazze_by_holly_jackson_119gi (npm)
--- Credit: OpenSSF source...
Malicious code in down_load_ebook_la_cena_degli_dei_by_marino_bartoletti_v2gjo (npm)
--- Credit: OpenSSF source...
Malicious code in down_load_ebook_christians_in_a_cancel_culture_by_joe_dallas_cvzlg (npm)
--- Credit: OpenSSF source...
Malicious code in dotenv-proxima-reveal-md-avior (npm)
Source: amazon-inspector 1e0b1c45f986cf6fbc4af0e177909c6672bece01b81cf95400b5748e8436cf14 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...
Malicious code in dotenv-parse-variables-nightmare-aether-run-script (npm)
Source: amazon-inspector 293766d85f705540910cf4c7fa5b34fed1ce2705dab395aa9b0d51f30ed0ce72 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...
Malicious code in dotenv-parse-variables-init-child-process-genomics (npm)
Source: amazon-inspector 98640b4344bddcf7df3cfc9d3664fa0d315971b9d3d25520d63786b5a4be8e0c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...