38993 matches found
Malicious code in disturbing_rooster_z3n (npm)
Source: amazon-inspector bdc4661837a90d92fd5473e343b7b8bf8503bca57cab49c4adb192d587ae256d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...
Malicious code in dhchukyso (npm)
The package dhchukyso was found to contain malicious code. --- Credit: OpenSSF source...
Malicious code in d58kww (npm)
The package d58kww was found to contain malicious code. --- Credit: OpenSSF source...
Malware in afhmxiewpsf
Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...
Malicious code in joko-klanting55-breki (npm)
Source: amazon-inspector fcd00e3a02dd3249203d511087599b3d08f8fa63ce46249bfe3d6ab12c008a12 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...
Malicious code in joko-kacang44-breki (npm)
Source: amazon-inspector 61c6571edd211396e64b3ceb5921f7cb6f9c8171e12674adac0e48bd3052f8df This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...
Malicious code in jimmy-poke6 (npm)
Source: amazon-inspector f485628ae2002aa77af27b761f73cfdb0f0265758f5d0f7038c4872f31fbd279 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...
Malicious code in jaja-getas88-sluey (npm)
Source: amazon-inspector 5bb2f23832f185736f93e656d450cd8a562dfcac19eebc1b2e10722754df2008 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...
Malicious code in intellectual_canid_0xrequest (npm)
Source: amazon-inspector 9865885937a1db1f7b87a9f33a7e2bfb04279ccc91c3131b0e2657be8878d885 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...
Malicious code in intan-63 (npm)
Source: amazon-inspector 8d1a93e6ab95711645684595b0a6e986c19d733142baa2fdd82e966f8a0f783f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...
Malicious code in eligible_swift_z3n (npm)
Source: amazon-inspector d7de7e6803c9a36421f4b56c5feba32759b2966b87011cb0ab3ede2fe636795d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...
Malware in @jacksher/install-exec-poc
Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...
Malicious code in drove-doll-bar (npm)
The package drove-doll-bar was found to contain malicious code. --- Credit: OpenSSF source...
Malicious code in doubtful_pheasant_brown-87 (npm)
Source: amazon-inspector 201b26ae2f321564833d75bc4f16adf718da3276ce81a436fc2dd89f3320f4fd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...
Malicious code in dotenv-parse-variables-nightmare-aether-run-script (npm)
Source: amazon-inspector 293766d85f705540910cf4c7fa5b34fed1ce2705dab395aa9b0d51f30ed0ce72 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...
Malicious code in dotenv-parse-variables-init-child-process-genomics (npm)
Source: amazon-inspector 98640b4344bddcf7df3cfc9d3664fa0d315971b9d3d25520d63786b5a4be8e0c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...
Malicious code in dono-toge69-miaww (npm)
Source: amazon-inspector 81ab9eabd768327170436a5a5d45dffe5490aebc42c9a155e89317579084bcb2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...
Malicious code in dono-naget9-apidev (npm)
Source: amazon-inspector 8d28585bf2822f65813be4ce8aac0fe504a94f70f6d829eefd2895ea96402c98 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...
Malicious code in dono-mendut72-sukiwir (npm)
Source: amazon-inspector 5ec80d6ac9676eba04ea13843591b36a059d4615a72201a8b48aa84a91af3b03 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...
Malicious code in dono-lutis46-sukiwir (npm)
Source: amazon-inspector d363d44f09b552dc64ac5767a1906db8fbe962d2c40fefdb148e0e6ca590f1a5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...
Malicious code in dono-ikan25-sukiwir (npm)
Source: amazon-inspector 347747fb15b65dbd54ef224cd8cb0dfc56b25855ced67a231439dc1403877ddc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...
Malicious code in dono-gembus48-breki (npm)
Source: amazon-inspector d6f753e22fc562a9a58809c2f02f41037969ff12a9132beda10c635980d0a500 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...
Malicious code in docusaurus-oberon-test-concurrently (npm)
The package docusaurus-oberon-test-concurrently was found to contain malicious code. --- Credit: OpenSSF source...
Malicious code in diva-tugfai-imagivaga (npm)
Source: amazon-inspector 68bdaf4d3ead9e5342127bc75e12f205d5691f56a6a5c23bf62febba5fa6a9d4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...
Malicious code in diva-tuai-inab (npm)
Source: amazon-inspector 0aaa32aa12f0a86e44ea8a0d79d97dce272d0f90856a99102b2a18d8bfa46942 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...
Malicious code in diva-banubot-imubgr (npm)
Source: amazon-inspector 12e85b8857388a81bc4d3a3c7639b0ba369fd9092de6cf47947b9ba6768f26bb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...
Malicious code in disciplinary_swallow_z3n (npm)
Source: amazon-inspector 29a06e93d2060683cb92888d86755a667de0e209948ec9fe651d7291928e0480 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...
Malicious code in diplomatic_caribou_beige-67 (npm)
Source: amazon-inspector b878a7cb34ab8ff12422863f3421f6df0ab88690b2f9d81a1ecd6b5dd3a93f63 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...
Malicious code in digo-kaism-lmior (npm)
Source: amazon-inspector 065f51172e3cc54a8eb0b6c79362aa0b0adc90ede1a03e0d1c9ad23642781c76 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...
Malicious code in dian-poke50 (npm)
Source: amazon-inspector b424579a5bb888f41798dad08f35c73f3757b03628abfb92909b0782382370e4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...
Malicious code in dia-32 (npm)
Source: amazon-inspector abc8c7af238d58b1a789ef617f02c95fc53758cae3f37fbe1f04662590bf4bbe This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...
Malicious code in dewi-gembus58-riris (npm)
Source: amazon-inspector 8d7d8303ec84126fde0e1e60e596c314f343156f4280c45bba48417bfc49b1e4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...
Malicious code in dewanto-miemee69-sukiwir (npm)
Source: amazon-inspector bf6a47732e27d25447ea7c723b573bbfa1191f6e5c366fc91edebdb6a0c79ccf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...
Malicious code in dewanto-mendoan46-breki (npm)
The package dewanto-mendoan46-breki was found to contain malicious code. --- Credit: OpenSSF source...
Malicious code in dewanto-empal93-sluey (npm)
Source: amazon-inspector ccaea24e3f2955206bd705cfcd0709d54e495beb516aec771c45384c3ec8097d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...
Malicious code in delta-grape-uniform-wqltg (npm)
The package delta-grape-uniform-wqltg was found to contain malicious code. --- Credit: OpenSSF source...
Malicious code in delivery-ci-upgrade-form (npm)
Source: amazon-inspector c49d0422f51d7d7937c6a2b133b12ac6f4c6f1b914f03e9a6ad558e1b0f09fce index.js unconditionally requires./runtime at module load. runtime.js detects platform/arch and downloads an OS-specific binary linuxx64, linuxarm64, darwin, win32 from string-split-obfuscated Cloudflare...
Malicious code in deliberate-plum-skunk (npm)
Source: amazon-inspector d0977b0be60a202d6807a06128154074339b8b1264fe6db58d63ad56425400d3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...
Malicious code in deimos-babel-callisto-algol (npm)
Source: amazon-inspector 4dc01994de9ac0f3c9e8b834ecd334693337ec9532aad21b65cd517f159f6c45 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...
Malicious code in defeated-blue-antelope (npm)
Source: amazon-inspector 4d947d5ff9fa98a2a402c8f0f1f39d85659a2e50f6b414cc48210c69253320a8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...
Malicious code in deeperscan-nft (npm)
--- Credit: OpenSSF source...
Malicious code in decentraland-credits-squid (npm)
The package decentraland-credits-squid was found to contain malicious code. --- Credit: OpenSSF source...
Malicious code in date-echo-xvcv (npm)
The package date-echo-xvcv was found to contain malicious code. --- Credit: OpenSSF source...
Malicious code in dark_seahorse_z3n (npm)
Source: amazon-inspector bddbedaf0d3a454f0883fa4bb318fe4b043e2301451963a0cc1c1554165f8a91 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...
Malicious code in damaged_dragon_0xrequest (npm)
Source: amazon-inspector 153ff4f395f35a50a7066b01618b65abdab5126f1efb8026476cf383dcec4fe1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...
Malicious code in dajouka-ssaa-t13a (npm)
Source: amazon-inspector e498a2fee9e1fea8b7c9745125f513b6833d091922af435a8ddf5d294a580c6f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...
Malicious code in dajouka-d-uftac (npm)
Source: amazon-inspector 40d2fa4762e66081471b146ba30ced6ca1b5451b772316d9278627b6c46025f7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...
Malicious code in dactyl-loopback-axios-lacerta (npm)
Source: amazon-inspector 94ef9b4077e3c6ce19e631255d57d1edaaaa35e2479ccaad486e1d3e0d6f9a3d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...
Malicious code in cz-conventional-changelog-meissa-proxima-pulsar (npm)
The package cz-conventional-changelog-meissa-proxima-pulsar was found to contain malicious code. --- Credit: OpenSSF source...
Malicious code in cygnus-atlas-juno-phenomic (npm)
Source: amazon-inspector c847e0f9815963114519ef959cc97a76ea2888b07251d662b2455677ef620e8e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...