38993 matches found
Malicious code in dropbox-internal (npm)
--- Credit: OpenSSF source...
Malicious code in drove-doll-bar (npm)
The package drove-doll-bar was found to contain malicious code. --- Credit: OpenSSF source...
Malicious code in droidfit (npm)
The package droidfit was found to contain malicious code. --- Credit: OpenSSF source...
Malicious code in driving_rooster_z3n (npm)
Source: amazon-inspector a7ef43a0e1d584c10b56d16bfc7ac2aa6818e56e7055c1b83ba2cb41417a4352 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...
Malicious code in driving_ferret_z3n (npm)
Source: amazon-inspector 842f18ef185fba06d851527e2e1bef209f636a7b3cbb206e525a6fe6696d7d71 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...
Malicious code in dreadful-yellow-dragon (npm)
Source: amazon-inspector da962d3c8f84ba3f18426560c437a9af13176d4eaa7cfba9e7daf71d35c648f0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...
Malicious code in drab_quail_z3n (npm)
Source: amazon-inspector f93645b9cf47a85338aec90ee17b80e675e8c96cf2316291cdd4e1f5097c3aa1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...
Malicious code in down_load_epub_the_perfumist_of_paris_kidm70 (npm)
--- Credit: OpenSSF source...
Malicious code in drab-pink-anaconda (npm)
Source: amazon-inspector d029d69e22033864d9bc744cf72cc375b6ee27a0107a163d527936d6e59e4370 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...
Malicious code in down_load_epub_long_bright_river_dfxa7t (npm)
--- Credit: OpenSSF source...
Malicious code in down_load_ebook_paris_era_una_fiesta_by_ernest_hemingway_tuvhq (npm)
--- Credit: OpenSSF source...
Malicious code in down_load_ebook_dark_seduction_by_sarah_piper_t9dtx (npm)
--- Credit: OpenSSF source...
Malicious code in down_load_ebook_la_cena_degli_dei_by_marino_bartoletti_v2gjo (npm)
--- Credit: OpenSSF source...
Malicious code in down_load_ebook_come_uccidono_le_brave_ragazze_by_holly_jackson_119gi (npm)
--- Credit: OpenSSF source...
Malicious code in down_load_ebook_come_back_stronger_by_sophia_thiel_s4j40 (npm)
--- Credit: OpenSSF source...
Malicious code in down_load_ebook_christians_in_a_cancel_culture_by_joe_dallas_cvzlg (npm)
--- Credit: OpenSSF source...
Malicious code in dotenv-proxima-reveal-md-avior (npm)
Source: amazon-inspector 1e0b1c45f986cf6fbc4af0e177909c6672bece01b81cf95400b5748e8436cf14 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...
Malicious code in dotenv-safe-global-jsonp-centaurus (npm)
Source: amazon-inspector f253194bc152f223c5f587a9c7fd65460595c70d27749389763c4afbb0de8ed2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...
Malicious code in dotenv-safe-dotenv-safe-proxima-juno (npm)
Source: amazon-inspector ca3c4fcc15f1f5b863a3b28080df54f4a4cf7f6436104b16708bedb4ab3b70b3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...
Malicious code in dotenv-cosmos-promise-css-minimizer-webpack-plugin (npm)
Source: amazon-inspector 57077612de819acf7cf711556c614e951a7d5f2f92fc0d3c785812dc62b803b3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...
Malicious code in dono-tek11-breki (npm)
Source: amazon-inspector ff3bc399a340f5d431fb4aa5d66a4639a3ac5d5d518e5805e87ec4c9c65cc21d The package dono-tek11-breki was found to contain malicious code. This package appears to be part of the tea.xyz token reward campaign that flooded npm with over 15,000 spam packages in 2024. These packages...
Malicious code in dono-tek88-sluey (npm)
Source: amazon-inspector 047da4a32dd64f2008979376a0c10d74251aacb6f2970a63088f9515292c9d39 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...
Malicious code in dono-tahu71-breki (npm)
Source: amazon-inspector 90ed885a3ef81d70b6371d5a94e965405e7faca521e2133a0ab6ea3ae695b188 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...
Malicious code in dono-takokak58-breki (npm)
Source: amazon-inspector 6242c9dd3fb41adfbebbc62c0227be8ab6b798f3fe80ff2baf4dcb0c33dfc443 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...
Malicious code in dono-sroto80-miaww (npm)
Source: amazon-inspector cb20a8cf866e6cf347da042cffd3b92e5d5c942dca75ed7420e3506c015fa302 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...
Malicious code in dono-sasag53-ruro (npm)
Source: amazon-inspector 0ac591a30dd07feeace644de1da852ec5343344d250c8d584806472574d04260 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...
Malicious code in dono-sego89-sluey (npm)
Source: amazon-inspector a7a5d5bc61a855c22339aae320cf5a0cc588caae3f7c9b4c071c4fd0dece3c56 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...
Malicious code in dono-lumpur76-tititugel (npm)
Source: amazon-inspector 7d488ccb001e42d4686a138c68e5a935cdf7740d6663e13cf5ab5fc04b2f6dec This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...
Malicious code in dono-lapis75-sluey (npm)
Source: amazon-inspector d533c3acad911d47e0517eb0da5682304a86bd0623594dc129b2174f642ce862 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...
Malicious code in dono-kupat12-breki (npm)
Source: amazon-inspector 396d39d540cde50211043313d1711270bdd2d0fd3d080e2ad71f51084a24847a The package dono-kupat12-breki was found to contain malicious code. This package appears to be part of the tea.xyz token reward campaign that flooded npm with over 15,000 spam packages in 2024. These package...
Malicious code in dono-kripik9-sluey (npm)
Source: amazon-inspector c55cd135e640239bf394131fc3f076627253b86e29fd628f8ca38bafa82e0c8e The package dono-kripik9-sluey was found to contain malicious code. This package appears to be part of the tea.xyz token reward campaign that flooded npm with over 15,000 spam packages in 2024. These package...
Malicious code in dono-jamblang8-sukiwir (npm)
Source: amazon-inspector abd8102a3e9357ff3f66c070afbcd262165d64b6efef260c51c83d2bbcf1bf94 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...
Malicious code in dono-ketan84-tititugel (npm)
Source: amazon-inspector c751a4b3e756915ce46ef5b88c5e4ffd50e28a184b6d50ae2e0d7e461a30b0bd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...
Malicious code in dono-empal50-sukiwir (npm)
Source: amazon-inspector a763ad2cbe1b63e17d032d063618475013e4da0e8b8c456aea0737df9f53c809 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...
Malicious code in dono-gembus48-breki (npm)
Source: amazon-inspector d6f753e22fc562a9a58809c2f02f41037969ff12a9132beda10c635980d0a500 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...
Malicious code in dono-gado-gado81-riris (npm)
Source: amazon-inspector 344c39a3c068b8b09bfe901b883a8db23b714130595c2f97de618d2564159e9d The package dono-gado-gado81-riris was found to contain malicious code. This package appears to be part of the tea.xyz token reward campaign that flooded npm with over 15,000 spam packages in 2024. These...
Malicious code in dono-botok88-sluey (npm)
Source: amazon-inspector 2e472a202168f0fefcec2833743ae0b5155a123ee6c3feba361cc6a67e55e821 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...
Malicious code in dono-bubur27-miaww (npm)
Source: amazon-inspector 3407a00d5f231298b76f5016a36ec9e5750ad34679f4bb46069593cfff405464 The package dono-bubur27-miaww was found to contain malicious code. This package appears to be part of the tea.xyz token reward campaign that flooded npm with over 15,000 spam packages in 2024. These package...
Malicious code in dono-asinan65-sukiwir (npm)
Source: amazon-inspector bc98c5296775a8cf420538669eb8c76c703d3cd341c9b48c10d67a1151f96704 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...
Malicious code in dominant_pinniped_z3n (npm)
Source: amazon-inspector f80b8fe9a547036d6cee17ed61e7216ea485f82f069a74aaab78634554b95a4c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...
Malicious code in domestic-crimson-tarantula (npm)
Source: amazon-inspector 21059687821f742567171786b3c88008d58351234b042c7d596ea59165177b2f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...
Malicious code in dolyame-ui-themes (npm)
Source: amazon-inspector 22c23ba8923130746ecc1e526c3a0ee8961ea764dd90d0da71236444d978ce27 dolyame-ui-themes ships a loader.js that is required from the package main index.js at module load. The loader reconstructs C2 hostnames from split string arrays to hide them from static scanners, resolving ...
Malicious code in dolyame-ui-radio (npm)
Source: amazon-inspector 49a775fc526a9d050f679466553ee679e1c85046f8122fd93c07efe0af0a28cd [email protected] is a dropper disguised as a UI/telemetry package. index.js unconditionally requires./adapter.js, which on module load downloads a platform-specific binary from string-split-obfuscated...
Malicious code in dolyame-ui-layout (npm)
Source: amazon-inspector 8f8bf970c387898705de052ea5736f3f90877cfcdad204af1a772b5230c95c31 On every require of dolyame-ui-layout, index.js loads platform.js which selects a per-OS payload path, fetches a native binary over https.get from Cloudflare Workers hosts whose names are assembled at runtim...
Malicious code in dolyame-ui-label (npm)
Source: amazon-inspector bdcede6d4d42bfed7f10577346b24e9af22655e50f8d454baab6f4999e6020f3 dolyame-ui-label 35.7.8 is not a UI component library. On require of the package, index.js loads helpers.js, which reconstructs C2 hostnames at runtime from split-string arrays e.g...
Malicious code in dolyame-ui-dropdown (npm)
Source: amazon-inspector 78e2cf3af799e05f20494aba04b5d85aa1335bce541af4cb13aa715a2cda6ea5 On require'dolyame-ui-dropdown', index.js loads helpers.js which selects a platform-specific endpoint from an obfuscated split-literal host list including oob-worker.cf101-adf.workers.dev,...
Malicious code in dolyame-ui-footer (npm)
Source: amazon-inspector 3ebf602f046406a056b2d9d36768cf4592ae2f8a02375b0fdb5212c3cc1e80ca On require of dolyame-ui-footer, index.js loads./runtime.js which selects a per-OS payload path, fetches a binary via HTTPS from one of three hardcoded Cloudflare Workers hosts...
Malicious code in dolyame-boxy-stories (npm)
Source: amazon-inspector c0ef68742c490f223f00748b7f5dc82d614231b0d68e430736bbaac9175035e4 On require, index.js loads bridge.js which selects a platform-specific endpoint and downloads a binary from one of three attacker-controlled hosts whose names are reconstructed at runtime via string.join to...
Malicious code in dolyame-ui-carousel (npm)
Source: amazon-inspector 99a12afad0ec2643334f24431df3b2ba84584a9569bca025b50ef52feb6b9493 On require of the package's main entry, shim.js selects a platform-specific payload path and downloads a native binary from one of three Cloudflare Workers hosts whose names are assembled by string-array joi...
Malicious code in dolyame-boxy-mobile-bnpl-picture-gallery (npm)
Source: amazon-inspector 1c65af74891bd25119adb9d53103bd5617a91800172c895bdd485809a86e0870 On require of this package, index.js unconditionally loads ext.js, which reconstructs C2 hostnames at runtime by joining split string fragments assembling .workers.dev endpoints with a DNS TXT-record fallbac...