MAL-2025-147834 Malicious code in semantic-release-process-alphard-commitizen (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2909c41dac1a109495cf0ea2e8cb4d523c9f422cf2ee0ae5cd922904f1122860 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143786 Malicious code in jabbah-odin-castor-lynx (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e305501ec1d001acbb239d5dd7c8b27592441584f5b792582fb454d30a2db986 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140847 Malicious code in colors-dotenv-safe-backend-optimize-css-assets-webpack-plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6116a38ab2e392b9841b501586a3f93c8ecb5457593cd69dd4d601275c119002 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141974 Malicious code in element-ui-mdx-mongoose-local (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 48897fe88d3818f6a236ba0cb640536ebef831b76dc9fed8b3420574e8f50f28 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143129 Malicious code in halley-auriga-prettier-plugin-markdown-rest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 121edc4555579663ed0cdd1b890a4798334cbc15d4f177d9d961e054c2b64395 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141358 Malicious code in csv-sedna-epimetheus-yaml (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 93a5060dfd3949e3872cfe6c37f816c552aa746dfd9a6dc0404a706d24cc47b8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142970 Malicious code in google-testcafe-apollo-mysql (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 16b892143c28a050f926f84699d2be8bb573669adcab03b0d52a3668e709575c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146791 Malicious code in publish-karma-ora-node-config (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0e61492f607b131464a50e46955f975b174ad6ba550ef711b084bae657885117 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145900 Malicious code in ora-yaml-yildun-node-sass (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 09671570cc0ec4dbf6e1be086b159d12ee823cd32564bfae08539f2b51fce710 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139312 Malicious code in algol-upgrade-ini-acamar (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ac480b2708c408bd3e270ab7728873ee2cac76bfff620699b9d1e38965fe6cfd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148087 Malicious code in solis-spawn-vuetify-triton (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6ed1c25e4ff43497e859926f784162a09b2dcd843db09507d4116ad823328901 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140471 Malicious code in cassini-native-blitz-bunyan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 57e9c1ddd23dbb7b4ae51e472bf7ef3b30980708e67a3f5144acea3514052e2e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145459 Malicious code in nightwatch-chai-query-leda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 963a62b6c50739741793c0b2b892aad88790e997e79f5496650f89e5a6651a5c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142352 Malicious code in exec-mocha-pipe-repository (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 98eab42201e22336dea2c31ea0ea8cc9c09882c65535f3ee18ea10f719c32e8b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143402 Malicious code in hugo-spectron-webdriver-oauth-husky (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4d0ebeb42b34d178ed1859055aca3c46a2421dea6dab1676a05906f340af7f1f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148936 Malicious code in umbriel-chai-celeste-registry (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cb53ad9f8260d9f1a374259b5f212dbf32617f7afc84f7ce85b009b16a3e5db2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149049 Malicious code in ursa-charon-server-markdown-pdf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 925ed6bf743b9330633d7e1b1686ade91f9fa24b0d26b3f6fe312522b3ac9d6b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141933 Malicious code in electron-soap-magellan-heka (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b52ccd77b3d326b562717c132e5824267c56c44d0c2fec12ffdbd096976b6ccf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144361 Malicious code in levels-octans-octans-neptune (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0117f2aace3537dee47da118ff5a43d53af2aee4b5e66a0fb6703848f77f02fd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149075 Malicious code in ursa-shelljs-buffer-rimraf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d64623aaf04619e9dbffea237cff686fd3ea843cdbfd2893241c7cf8b3430d24 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...