Malicious code in inquirer-winston-commitlint-cosmiconfig (npm)

Source: amazon-inspector e8d8803b934bddaa10af678e2f1095520a0c5df75893b63ef2fb45b3564318c6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

Malicious code in indah-rangi90-riris (npm)

Source: amazon-inspector 8df1ba4ac4415b21f91595cee12d26b0aaa53eba546955b27d292a09b47079a7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

Malicious code in indah-kripik11-miaww (npm)

Source: amazon-inspector d1477de72f1819287780f3689de5e9bfba054438d00cfad2dad71a05d0688116 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

Malicious code in indah-keripik38-ruro (npm)

Source: amazon-inspector b6d9228a705c72e297a6ab447aff7a6f83681301c4ec43b6ab7213d80cd2d6d8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

Malicious code in indah-gaplek87-riris (npm)

Source: amazon-inspector ce30d7ed66578ca5aba01facc7592b24699adf3431c706ce72a0ff404975788c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

Malicious code in inda-fodja-gugopa (npm)

Source: amazon-inspector c9f656f467fae61c47e54da832eb593a4f58ef6bbdc9141ec22cbdf752d08a78 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

Malicious code in historical_dragonfly_z3n (npm)

Source: amazon-inspector cc398f811d35e281ae0680bdbd796449d092c6eaffe1b3e1ae2aaa343bd304eb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

Malicious code in hadi-rendang61-tititugel (npm)

Source: amazon-inspector a01c4dc7af947cb65d079769385a16554af625a69dda3b00b403c6b175bcaf36 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

Malicious code in eligible_swift_z3n (npm)

Source: amazon-inspector d7de7e6803c9a36421f4b56c5feba32759b2966b87011cb0ab3ede2fe636795d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

Malicious code in down_load_ebook_paris_era_una_fiesta_by_ernest_hemingway_tuvhq (npm)

--- Credit: OpenSSF source...

Malicious code in disturbing_rooster_z3n (npm)

Source: amazon-inspector bdc4661837a90d92fd5473e343b7b8bf8503bca57cab49c4adb192d587ae256d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

Malicious code in dhchukyso (npm)

The package dhchukyso was found to contain malicious code. --- Credit: OpenSSF source...

Malicious code in d58kww (npm)

The package d58kww was found to contain malicious code. --- Credit: OpenSSF source...

Malware in afhmxiewpsf

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

Malicious code in joko-klanting55-breki (npm)

Source: amazon-inspector fcd00e3a02dd3249203d511087599b3d08f8fa63ce46249bfe3d6ab12c008a12 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

Malicious code in joko-kacang44-breki (npm)

Source: amazon-inspector 61c6571edd211396e64b3ceb5921f7cb6f9c8171e12674adac0e48bd3052f8df This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

Malicious code in joko-gado-gado81-sluey (npm)

Source: amazon-inspector 15fd8f8f0ea216359778c9cb9a658da767a42aeb0a138d2ad6705a9864f98e6e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

Malicious code in joko-dradag46-sluey (npm)

Source: amazon-inspector 0b24b071e063d279ca949f4297d4a9c5f1a8a2ad1392d5b8865cede8a3347e61 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

Malicious code in joko-bubur71-riris (npm)

Source: amazon-inspector d6d7132ed7c005bc9d6613d25ebcd0c34bead77a0b6a2d1df465c5274b22260b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

Malicious code in jimmy-poke6 (npm)

Source: amazon-inspector f485628ae2002aa77af27b761f73cfdb0f0265758f5d0f7038c4872f31fbd279 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

Malicious code in jermiah (npm)

The package jermiah was found to contain malicious code. --- Credit: OpenSSF source...

Malicious code in jelek-rasaaya-n (npm)

Source: amazon-inspector b2bcd73ef09676b41933668ea0a5f79c385434b648b656e547cccb8cb6dd2fb3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

Malicious code in jaja-getas88-sluey (npm)

Source: amazon-inspector 5bb2f23832f185736f93e656d450cd8a562dfcac19eebc1b2e10722754df2008 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

Malicious code in ira-36 (npm)

Source: amazon-inspector f68ec347db3ad36d2a9fc4f609703789f1f28dec4c95fc70250609980c704d7b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

Malicious code in iota-restart-zephyr-jasmine (npm)

Source: amazon-inspector 83a7daabab530d79b8db3ad0510cf6550376ed0f4ebd84028108abfaa1eaf571 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

Malicious code in involved_bison_z3n (npm)

Source: amazon-inspector 578e27ae5ce775c2e6c2c415869dc59e69ccce3a61f83981e9202b3dbc4f0adc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

Malicious code in interesting_caterpillar_z3n (npm)

Source: amazon-inspector 7184ff9c095fb857e3d41a0ad3a8cccdadad3f01450fc7fa8b1701a5d64c6935 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

Malicious code in intel_collab (npm)

The package intelcollab was found to contain malicious code. --- Credit: OpenSSF source...

Malicious code in intellectual_canid_0xrequest (npm)

Source: amazon-inspector 9865885937a1db1f7b87a9f33a7e2bfb04279ccc91c3131b0e2657be8878d885 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

Malicious code in intan-63 (npm)

Source: amazon-inspector 8d1a93e6ab95711645684595b0a6e986c19d733142baa2fdd82e966f8a0f783f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

Malicious code in indah-peyek74-sluey (npm)

Source: amazon-inspector 12505a23c41a553353a37f876d7cd9f234387f47778c69a2c6aff4f08fbca627 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

Malicious code in incredible_llama_z3n (npm)

Source: amazon-inspector 88573b867c78d5ab192cf7101ed49d47adedba87e6c2b51c14c7ca8e89e74439 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

Malicious code in imodiov-koifi-cuidcavuaompg (npm)

Source: amazon-inspector 8deaaa948e23729f6fa855ba023626760693c4bdd69c39cd500211fadbae3fd5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

Malicious code in ida-gandul100-riris (npm)

Source: amazon-inspector 0eb1ad292592cbaf2b47217817e02a9bd4109add14bc9ca18fdf3d6a0c46e563 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

Malicious code in helenacarvalho (npm)

Source: amazon-inspector 48ad09fd38acdd425d2cae8278a8c86aa40560eb562867f378e43e4196b5c2e4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

Malicious code in hanafi-wajit38-riris (npm)

Source: amazon-inspector f97a5e2ab5b66791e0289828cb926d6945b701da250076c2fab1e00e631322b4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

Malicious code in hanafi-nasi19-ruro (npm)

Source: amazon-inspector fbd23369818376a031f3a7b627e684bfaf1875d780afe7303e0e795592118494 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

Malicious code in hanafi-gaplek27-sukiwir (npm)

Source: amazon-inspector a59dbe78bf05dc7e907838f6e15de9c92506d9baff2dd62aa50d5a32322866f4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

Malicious code in hammock-kaleidoscope-ijd211-project (npm)

The package hammock-kaleidoscope-ijd211-project was found to contain malicious code. --- Credit: OpenSSF source...

Malicious code in goodaan-ngusafa-ni (npm)

Source: amazon-inspector ffe02b05f0f2f0c3e3acfe8e0099d30a43c33cb518499ad9cdc4835275bfc70b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

Malware in @jacksher/install-exec-poc

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

Malicious code in drove-doll-bar (npm)

The package drove-doll-bar was found to contain malicious code. --- Credit: OpenSSF source...

Malicious code in doubtful_pheasant_brown-87 (npm)

Source: amazon-inspector 201b26ae2f321564833d75bc4f16adf718da3276ce81a436fc2dd89f3320f4fd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

Malicious code in dotenv-parse-variables-nightmare-aether-run-script (npm)

Source: amazon-inspector 293766d85f705540910cf4c7fa5b34fed1ce2705dab395aa9b0d51f30ed0ce72 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

Malicious code in dotenv-parse-variables-init-child-process-genomics (npm)

Source: amazon-inspector 98640b4344bddcf7df3cfc9d3664fa0d315971b9d3d25520d63786b5a4be8e0c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

Malicious code in dono-toge69-miaww (npm)

Source: amazon-inspector 81ab9eabd768327170436a5a5d45dffe5490aebc42c9a155e89317579084bcb2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

Malicious code in dono-sego89-sluey (npm)

Source: amazon-inspector a7a5d5bc61a855c22339aae320cf5a0cc588caae3f7c9b4c071c4fd0dece3c56 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

Malicious code in dono-naget9-apidev (npm)

Source: amazon-inspector 8d28585bf2822f65813be4ce8aac0fe504a94f70f6d829eefd2895ea96402c98 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

Malicious code in dono-mendut72-sukiwir (npm)

Source: amazon-inspector 5ec80d6ac9676eba04ea13843591b36a059d4615a72201a8b48aa84a91af3b03 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

Malicious code in dono-lutis46-sukiwir (npm)

Source: amazon-inspector d363d44f09b552dc64ac5767a1906db8fbe962d2c40fefdb148e0e6ca590f1a5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...