MAL-2025-147819 Malicious code in semantic-release-apollo-pyxis-changelog (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ce22352efdc3f40b70caca8d6d7a5e75205d60966dd3b078d3fe713b46a83c4d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146577 Malicious code in procyon-atlas-jest-halley (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fc5f147fde98a922274e900cd54befd2b404f5b5c90d849347db757a294df9af This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146645 Malicious code in promise-nuxtjs-umbra-express (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4d6747916a43b67afac536aee936f618012365ded1a68c4b06f03465d4eca2da This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148014 Malicious code in soap-antd-antares-parcel (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 87a5ca78aa719be19ec810f3b50d1afe612836f899f51ab3d5d2b2d1c67ed486 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142516 Malicious code in firebase-tailwindcss-pegasus-json (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7c42e3fd037db8f4b91d3aaefec30fd2fbad79523ac2b95a4aaef0bf75c2eb56 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145663 Malicious code in nova-passport-hyperion-dotenv-safe (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a3b1717d7f72fcec0841422679aabc0f3e49522afca70aa518e274c8d4479e26 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146726 Malicious code in proxima-oberon-magellan-uninstall (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b0756d527441ccfc12f2511749f3ee90f35af9639574db1d5831c61e0e56502b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149506 Malicious code in winston-loglevel-ariel-cors (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d8400d28101f9e8945eeecd6bc1b83b5ef1c31064aba6739eb69b2bd2223d4f4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140107 Malicious code in bootstrap-hugo-altair-rehype (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector beac14029dddc28c5b4bbe056a0cbef77f3507b7b61076db87a723febc37e8a1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144334 Malicious code in less-loader-terser-umbra-regulus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d2e0130e99b103ea34fd14f21dae9f7697b1ec917b81b17040f86befcb6a844b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141135 Malicious code in cors-schema-nightwatch-postcss-loader (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6a3068afe7dca873227fe3f04e64f38db980de42d0e7cc3bfc9bd80c41ccff06 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143416 Malicious code in husky-figures-bellatrix-chai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9c7290a8ee768fe8eb682d1a4b184d110bd129efb75b6be7c89154ad79ad18e4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146798 Malicious code in publish-nova-aether-bellatrix (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bcc0ef7498df46ad1391af56a01bba2c87e9deb4047a5ee1f1895ce5d5f14168 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142472 Malicious code in figures-lacerta-ceres-canopus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bf441778c71088799e3df4f5fcc29bae87a6efe489abca752befa1db4e635cca This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142501 Malicious code in firebase-leda-octans-postgres (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 046135d9533214ad4d91e18be5daabadf580eab15d8555b1898656eb50254295 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145831 Malicious code in ophiuchus-ophiuchus-hydra-yakutsk (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 47788e2971989ebfda1e3e06af9e81bcdc202bc958dd8727b5529b76fd1c5c95 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144317 Malicious code in less-loader-cross-env-nebula-ceres (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f025b35fb83b50288be5f6c7f07f992e963b337094085def0b5a13b58ea2631f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146875 Malicious code in pyxis-docusaurus-quito-start (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3e4fdcb0fa11f7d81e3e00157275ea670dd1aa4dcec97934fc67da2394e5246b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142405 Malicious code in farout-cz-conventional-changelog-xerxes-testcafe (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3a3749d15f0ed5daee79bbfa0fe5c0867b99a26caf87494156a93eb26468dd25 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147970 Malicious code in sirius-pyxis-cypress-cressida (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b99e2e262d6206a7c37e45b03e962ce60c1174ec7a7502ec42642eb7dc5a3fa5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...