38993 matches found
Malicious code in cutmap (npm)
The package cutmap was found to contain malicious code. --- Credit: OpenSSF source...
Malicious code in cute_mollusk_z3n (npm)
Source: amazon-inspector 26dfdeae338ad4ed72bf597429f3d203e7a932e806a87852359ddcd44ab458ed This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...
Malicious code in cute_booby_z3n (npm)
Source: amazon-inspector 6fc7abd078d0f01aed0b1d7f6d8732633f41d190be7513dff17f123f3964179d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...
Malicious code in current_tyrannosaurus_z3n (npm)
Source: amazon-inspector 98ff019357eab64d9e25b63d8161211f7dbac0aaee41b519da1dfc431cf48d24 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...
Malicious code in curly_llama_z3n (npm)
Source: amazon-inspector 5ec39aa44f95fafe0248a732f5b8b290c808329224bdf9ebddd4e724cfd4fbdb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...
Malicious code in curlix (npm)
--- Credit: OpenSSF source...
Malicious code in cuevana-3-free-ver-john-wick-4-completa-en-espanol-gratis-latino (npm)
--- Credit: OpenSSF source...
Malicious code in csv-module-mocha-lyra (npm)
The package csv-module-mocha-lyra was found to contain malicious code. --- Credit: OpenSSF source...
Malicious code in csv-changelog-dagda-rimraf (npm)
Source: amazon-inspector afc290c2c78dcba5a346d338e0129ef0840d8e48f706f0fa46d08a8abd15054c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...
Malicious code in css-minimizer-webpack-plugin-framework-nextjs-upgrade (npm)
Source: amazon-inspector 0f30f366708cef8bca649ed0d2111bba2e06d274b44d3c3ffe7f6ccc876441e6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...
Malicious code in cspmarket (npm)
The package cspmarket was found to contain malicious code. --- Credit: OpenSSF source...
Malicious code in csllfi (npm)
The package csllfi was found to contain malicious code. --- Credit: OpenSSF source...
Malicious code in csport (npm)
The package csport was found to contain malicious code. --- Credit: OpenSSF source...
Malicious code in crystal-70h3z-xxzc7-glow-project (npm)
The package crystal-70h3z-xxzc7-glow-project was found to contain malicious code. --- Credit: OpenSSF source...
Malicious code in cruel_tern_z3n (npm)
Source: amazon-inspector 7887e3c7a6350f8b9772863b16b27aa917429fc88592168c222c009d4a98188b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...
Malicious code in crucial_guineafowl_z3n (npm)
Source: amazon-inspector 167ece42e1e98cdcf3eddc6eeb3d002813ac6467aa1a5075f8de654ad0ef56ed This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...
Malicious code in crucial_grouse_z3n (npm)
Source: amazon-inspector 99391e140c84477f1b7a5aa8bcd9d5a9998808e6ffaa4a264195ca2f53d5935d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...
Malicious code in crowded_bee_z3n (npm)
Source: amazon-inspector 8f5c450fee14e4f039026c24792856c1ac851a0d39563381495bdc57ab161206 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...
Malicious code in crowded_worm_z3n (npm)
Source: amazon-inspector 2e93b601ba4d9226659c9f82981d641b34f5ae592526bfbe75ff53742cdf4087 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...
Malicious code in cross-env-canopus-stratosphere-local (npm)
The package cross-env-canopus-stratosphere-local was found to contain malicious code. --- Credit: OpenSSF source...
Malicious code in criteo-video-player (npm)
Source: ossf-package-analysis a71052dd6a243d5cbf33f701f287777125ed237e9d9b2e750874fea97a0d7618 The OpenSSF Package Analysis project identified 'criteo-video-player' @ 1.0.0 npm as malicious. It is considered malicious because: - The package communicates with a domain associated with malicious...
Malicious code in cressida-geodynamo-nova-spica (npm)
The package cressida-geodynamo-nova-spica was found to contain malicious code. --- Credit: OpenSSF source...
Malicious code in creepy_cougar-tool (npm)
Source: amazon-inspector 7838c9d633e5b5f560bc4e4010c4d8f3c21648c079f0cb6f2b166730a873caff This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...
Malicious code in creative-aqua-crayfish (npm)
Source: amazon-inspector 6d5659c1f34205fa43ba5d17f75e523dc1f62ebc3ea2b16868c7f1d744870634 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...
Malicious code in creative_leech_z3n (npm)
Source: amazon-inspector 9682c17a2113756da71e4074044bb18739586679dbb42d3a5477e8c8444f3dda This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...
Malicious code in create-mcp-use-app (npm)
Source: amazon-inspector 2781601c3ba0c5d6d4b78bf322d88a4d189473e68d2382c171106342acacd271 The package create-mcp-use-app was found to contain malicious code. Source: google-open-source-security 718d4d0c5748f26d9c0e556f1914ad2b646ee3e9bec9cfdcb7222e201886ffee This package was compromised by the...
Malicious code in crafab-notthedevs (npm)
Source: amazon-inspector 56ca07e6ab79c3b6827ec9b57812cb48ef8f15ad30745bab3a2bca040cba34b1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...
Malicious code in cosmochemistry-gridsome-epimetheus-sequelize (npm)
The package cosmochemistry-gridsome-epimetheus-sequelize was found to contain malicious code. --- Credit: OpenSSF source...
Malicious code in cosmiconfig-prettier-stylelint-centaurus-antares (npm)
Source: amazon-inspector 6b2b3af4f75fa5fb6640299c10d355b8a8184131a97251ab5b51ba36f1474cf2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...
Malicious code in cors-relay-mini-css-extract-plugin-winston (npm)
Source: amazon-inspector 45b5d4138a7e858f7a94edc8c60c8746ad366a44ba1f9fafa3a7461ac2cca612 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...
Malicious code in corresponding_platypus-appteadev (npm)
Source: amazon-inspector e0d2d48662178a018131a31cefc46b0e546e1271faa07ebcb8702cfbeb92bc30 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...
Malicious code in corresponding_marmoset_z3n (npm)
Source: amazon-inspector 9ff337a532fc2c1d367cfaf94e2ef8278c543e15505017f220b6f6905b3142f6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...
Malicious code in corporate_minnow-notthedev (npm)
Source: amazon-inspector 8e8c694f8ec4ff704611cd757272d7d37d1281c32f52fcfba1c27cecf0683b1f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...
Malicious code in cormackelly (npm)
Source: amazon-inspector 69ab6dad8d88eb186730560651c59923c9162d55049731ac4e132e5aae48611c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...
Malicious code in convincing_muskox_z3n (npm)
Source: amazon-inspector 82c09453e5899924cce9854e3d044c6a06ead16f57c863b86176c84c16362a13 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...
Malicious code in convict-playwright-eris-publish (npm)
Source: amazon-inspector 3dd3b156740f71ff872f80c4d30cc69d2d1787e5ed6674ad7a025f35dc0f037d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...
Malicious code in controlplane (npm)
The package communicates with a domain associated with malicious activity. --- Credit: OpenSSF source...
Malicious code in continuing_xerinae_z3n (npm)
Source: amazon-inspector 9fe9cd5dceac3891b233ac59c7078eb03ed3fdd9d3828ba4fc8358c7b8096d10 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...
Malicious code in controlled_goldfish_z3n (npm)
Source: amazon-inspector 0978b2057f340785dfda7fe607d0804db821d3ba71f1d484435a1232837a9228 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...
Malicious code in continuing-turquoise-anglerfish (npm)
Source: amazon-inspector 0ee0b31974c0322046b7f7390a9773d3a5e878827481764aad034536d579ddfc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...
Malicious code in continuing_leopard_z3n (npm)
Source: amazon-inspector 0b5fa89a58377cec56d34c4ab39818353d5955a28fa6336247b2a6580fba306a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...
Malicious code in continued_lemur-silentdev (npm)
Source: amazon-inspector 32c36ac2fd9ba2e0d6ac9057f6198334a07727b45c5a67785cd9a2e016c14dee This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...
Malicious code in container-tree-signal-notify-permission (npm)
Source: amazon-inspector b71d5038f64d6e372dc504ee04667b316a274a372b8dddb45c2cd8c93fd779d8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...
Malicious code in constitutional_eel_z3n (npm)
Source: amazon-inspector a7c0e089e94a9a3f74600b60a23e24eacd16f676481da11275baaed4258b9c0b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...
Malicious code in constructor-blocks-mailings (npm)
Source: amazon-inspector 5124a2b9217dc772621cdedf3938c8ed063ede4daa0fdd82c2e11b9df85403fb On require of the package, index.js loads adapter.js which selects a platform-specific endpoint, downloads an opaque binary from obfuscated Cloudflare Workers hosts oob-worker.cf100-416.workers.dev,...
Malicious code in constant-values (npm)
Source: amazon-inspector 3eef7c3f6399148abe5dab50aeb81b1f42322e6ab93c0a116e7426486bb8ef0a The package constant-values was found to contain malicious code. --- Credit: OpenSSF source...
Malicious code in considerable_squirrel_z3n (npm)
Source: amazon-inspector 3c5b92b0d9a4aaf644f145bae9f3bc1bbc8d0ee6a12f256afad9c61fa1df6209 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...
Malicious code in considerable_leopon_z3n (npm)
Source: amazon-inspector e3c183f67799cff7d5dc01630eaf1024d4b68955de650aee0a2581d65e5c77db This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...
Malicious code in conservative_dolphin_z3n (npm)
Source: amazon-inspector 351f8fda3d108276971810c7cdad1ddd85dd0b60640ce7ad8f051696259e3170 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...
Malicious code in conscious_barracuda_z3n (npm)
Source: amazon-inspector a97a9aa9b97bafbc976a6708091c1fb44bf81adebce84ef3182fa1458b01b6eb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...