MAL-2025-141421 Malicious code in cz-conventional-changelog-json-postcss-babel (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dbd6de2a6c0372ae79850650d8940ec76ca71a9960035df0b80f22d78e6b270e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147549 Malicious code in run-script-nconf-hermes-commitizen (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 50ef6b1061299d5a40c1afa8a79be5c0c34df15a6f6cb207fc51e33fec9000cb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148437 Malicious code in sync-yaml-elara-hercules (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dea9f1b94089377fb6cbeb5040baccbf4222db8e33dab625fa7aafd9a8798f1e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141729 Malicious code in dotenv-parse-variables-ora-aquarius-markdown (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6ff8e83bb1b3ab4c34714f6ba9d7921da13616d537496b69657f53bf7cb62eb5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145001 Malicious code in mira-andromeda-csrf-apollo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 205dbb23936230601580aec44ec7ecae172b933acc677bca41f2c589c796f577 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142294 Malicious code in europa-stream-yildun-relay (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6c3b624a260274455e78a036a64307a519eda97234957779c2f5313e1a531af8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144811 Malicious code in meissa-levels-telesto-spawn (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5dc40869949a69768360f9af63c89cea3b28132151b53e72fef18b97eeaecd91 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143735 Malicious code in iota-node-config-nconf-zenith (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 776028f8550df0eb3f0612e558293396e665b35add8f207b7c3b8636a9fe1b6a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147623 Malicious code in sagitta-supervisor-publish-bunyan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5de9a0ddb3ac825b2c032dd952456a12fa1dd6793f53dcdfedbc6229196f808c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139564 Malicious code in arcturus-ariel-install-eleventy (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9a80cf0a64a22f38a82d52ff34e6e0d8162043c7109b0ced96ece487449a15f0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144397 Malicious code in link-async-global-reveal-md (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bf9b45fa02a6e71ab581e7e6ce2fa292132a4030cd9f32985377b6f7eb975e24 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140848 Malicious code in colors-elektra-hermes-spawn (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 36783a474b043cdb1e111f0a4ff2ec93bf162f4492ff990caa669c4b82dced6e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148082 Malicious code in solis-polaris-playwright-pipe (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 34e983822d8b03a418bd8a85ce536d41b0df53160f182584fde4cf5e0a104f47 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143161 Malicious code in halley-pino-pretty-regulus-nightwatch (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8c08d4d37a0908dd0029adbafb586664fbed5cc5672dbd3fd6939390f094e0e8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142981 Malicious code in got-jasmine-zenobia-cz-conventional-changelog (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9dadbc22d6c22338cc6fc5058d13df1e0f881a222c8c88cce245321bf4480aac This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143212 Malicious code in heka-perseus-jasmine-yonder (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 805f356bb4d61795fc241c8c90b7069725fc6c8e2bbba73af382ed4cc9fb3072 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143118 Malicious code in gulp-mensa-izar-changelog (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a75fb3ccefc8bcbdcfb2e4436dd2f9ac85c0abd3f44fc280455f24a5c155ef18 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141692 Malicious code in dorado-local-dotenv-safe-spawn (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6d65cf7abaf0a3cc4bc9be9d18b01ff806f8e740363dee4a0772a1daa3691af8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149769 Malicious code in yakutsk-got-antares-enif (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1ce06be0821d032561661c0c9238657114ecb684b348a6e7cd326f717af19730 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148432 Malicious code in sync-rigel-prettier-stylelint-concurrently (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 36fdfe2ba2f55f9166a1ca14e1f32bf78fab47697ed4a1450f221028760010b5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...