MAL-2025-147854 Malicious code in semantic-ui-perseus-firebase-cypress (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 434d4e5d4dfaf9d49ee0ae359f833596501a2b8580d6d1017a79d5082382164a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142419 Malicious code in farout-neptune-dione-transform (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1c0c1d2d632485105b695892cfdf331ec228fa9c0c4b44667c6207987bd0b91f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142770 Malicious code in gacrux-hermes-mysql-meteor (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 968c91bfa918d1b575481a21e04dc8ff86bc84701ba0de6aeff412ae75a289f9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144715 Malicious code in markdown-rollup-plugin-quark-zephyr (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector faa58f284a8cac376e8e3bfee0622f1478d5c0ee0e9e7ab7763a651438499b33 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145833 Malicious code in ophiuchus-pavo-docusaurus-babel (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 99a79c288080b8fddeb7066d7a272b440e104692bf11d0fb31de33667ee13c74 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146706 Malicious code in proxima-auriga-luna-zephyr (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7fc49a5534846ee216e1649c7299a0fb3a5fa939dbe2741ab3b04cb4e71e15b9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143367 Malicious code in html-webpack-plugin-kronos-phoenix-antd (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector be073f8cb8485f271913239bfa8cae9973ba43ca51182df57b25b58b8718f62b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148030 Malicious code in soap-pavo-terser-got (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e9ffff8cf6a504a54d7a9a9b8193efbb4dfc00ae43a56bc384e678ccea487576 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148654 Malicious code in thuban-less-loader-spica-achernar (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f75cf876aa95769e2ba3d7933527e5c1a77fc9d3cb34fe7dff7f4751c282c6b5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148060 Malicious code in socketio-pavo-prettier-stylelint-global (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ef069690a1512a2f00962ec60f16b54aebfe8dcef7955eb47bb0bc8bb4ee1b47 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145287 Malicious code in native-cz-conventional-changelog-meissa-atlas (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bac21f13b4b7614fa1c9af0606fd1809d609ba57b1a9f0340f11c23f245f30b9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148466 Malicious code in taurus-deneb-hyperion-selenium (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 272cd4b9d4ac9f5f74e53ef7dc88df2918c406718307d5e5c981031ab4e14c5b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147262 Malicious code in repository-dependencies-hydra-async (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4e75f6ee4236a3b8223e7f6c412df1726c301ecb388a8fcf047e23cf9e30d792 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cors-publish-commitlint-nextjs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 83afc2eefb1361d3c9c6fb8e937af6f9c9354971683511d7d86fabd6569e6edc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141113 Malicious code in cors-aldebaran-aldebaran-cz-conventional-changelog (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c1fbad0e36204591df10ee8666cbe61cee4d9d90e7623bcc6a1c10593e34ea94 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140542 Malicious code in centaurus-despina-pipe-oauth (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b7412f390ed0a56288b73f2f3b4c82e88af73120b691359e975a6aca3e0cacf6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140607 Malicious code in chai-virgo-spica-blaze (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c89f745f535148fb9dba116bf9fff2d297aea6b16488115eae1578780426684e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144432 Malicious code in lint-aquarius-morgan-ora (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 602a9e575ea97787e2315b95517cc650d51f2f0bf594adf1ade583b2e9857258 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146474 Malicious code in prettier-plugin-markdown-acamar-envconfig-thuban (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 361b8a7389a834642eeb401ef7fbc6dea2d900d52e6c622faefef63f839a6cdd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141427 Malicious code in cz-conventional-changelog-private-superagent-module (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ca679e5bef873726be141435454053c2303e09ba8a82603c7836e0ae50b98986 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...