MAL-2025-149473 Malicious code in wezen-webdriver-manager-eslint-plugin-changelog (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9d08eab0498ea6d4742fd2273a6ca42ba843338b52356b14b91e8ff07b822c94 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147432 Malicious code in rigel-less-lint-changelog (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f0250b17d1e824b9261142e2ef10bcd989d933f1fe55d49cfd55a9fc7ff406bc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148723 Malicious code in toml-transform-mongoose-cz-conventional-changelog (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c4c5aa347312aa9608e31732bf55144c791fd30f70ee314980a49a5e5bb3ea7d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-111900

Malicious code in kronos-apollo-changelog-eslint-plugin npm...

EUVD-2025-115430

Malicious code in changelog-pino-pretty-webpack-bellatrix npm...

Malicious code in regulus-playwright-module-changelog (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 90075389520fca1dc8dcf50dc52fed0877aa7333d09c48f7364e8a280d81e09a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-123706

Malicious code in pino-cz-conventional-changelog-sass-loader-mongodb npm...

EUVD-2025-124396

Malicious code in node-config-xerxes-cz-conventional-changelog-rehype npm...

EUVD-2025-112969

Malicious code in halley-graphql-miranda-changelog npm...

MAL-2025-140077 Malicious code in bootes-docusaurus-europa-changelog (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 57738b105027f69248fd944434baeaa2ed746a584c2111cbd47f4dfe1303e997 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147800 Malicious code in selenium-changelog-cygnus-start (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 737e61e6b3c79918629a831b886044c747112191f4f98adc035a01d44f116970 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140783 Malicious code in chromedriver-xml-pegasus-changelog (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 19f52ded8bfc84ebbe04d07b1108a8d1b710bbc95ccb3d81b2fe2ce1279bac8b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-116421

Malicious code in auriga-less-cz-conventional-changelog-axios npm...

MAL-2025-140681 Malicious code in changelog-rollup-proxima-process (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dbce01fe12dee0ad06db12fcd44184e7a2fa4e4ae51be17a138168babedebe9e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143852 Malicious code in jasmine-fomalhaut-changelog-supervisor (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector caa38a95490450c4b15fd8fc796ac0472049559c3449ac79dbe54b1e6a3e178f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143647 Malicious code in inquirer-frontend-changelog-lynx (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b8c250a136f5d0990b830b851b42d887b841167f96ed2d9628e6dc86facc74ec This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140685 Malicious code in changelog-spawn-spectron-webdriver-query (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bbb9232c41cee975e4e3646f041c2c10d24472a10c0535ca5b38420c9aa76bdb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143337 Malicious code in hexo-changelog-sagitta-nconf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4f4530a5fd230ffc6615d6cacdc70a3aba46b71e960378c617d3a6f453067a59 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-116460

Malicious code in atlas-changelog-nebula-kinetic npm...

MAL-2025-140669 Malicious code in changelog-eris-apollo-cross-env (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 049d96747335ea7770993eb1f70fc96a4667abd33a8f58524be01f2c0992446b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...