MAL-2025-148154 Malicious code in spica-ceres-semantic-release-janus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 94907f605263e00cb2d997529dfc2248d32cb9f5aa066cd46b1869ed5c1b64f4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143179 Malicious code in hapi-commitizen-update-semantic-release (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 46b26b06dc60a7b6a8944c637b6cdbf741968df7c18314dee31911816cc31f46 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141932 Malicious code in electron-semantic-ui-local-package (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8f8ae4d278c10bbf43bd015302566ba9e83c2ad8462dec439b9985e4afdb95ef This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144043 Malicious code in juno-wasat-npm-semantic-release (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector becd63c258d392909d6d35ad638018409437efb2477de536e766c7b9ccd607c9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in semantic_piranha_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 63beaf6b97e638fd9e00f8a7612d57574c3bd623966e39b30d2ddd4ea061d99e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-102311

Malicious code in semanticaphidz3n npm...

EUVD-2025-102310

Malicious code in semanticfelidaez3n npm...

EUVD-2025-102309

Malicious code in semanticguineafowlz3n npm...

EUVD-2025-74268

Malicious code in semanticshrewtomato-28 npm...

EUVD-2025-80617

Malicious code in semanticelkreplicateautomation npm...

Malicious code in semantic_dinosaur_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 694769f6509e1ded489c8274828722254132f3b2bed18015972d77a780ae3ff6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-73783

Malicious code in semanticdinosaurz3n npm...

EUVD-2025-73782

Malicious code in semanticgoatz3n npm...

MAL-2025-96510 Malicious code in semantic_skink_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector df6d76942c75a58649c2fa35f607cecfefd0813fbc021f8f287c240ec8049f0e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in semantic-cyan-damselfly (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a1b553644de427e34fa23d335fb2c6bb983e180edadd9f2f2fa6da1db33f9eb5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-52124

Malicious code in semantic-cyan-damselfly npm...

MAL-2025-70525 Malicious code in semantic-cyan-damselfly (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a1b553644de427e34fa23d335fb2c6bb983e180edadd9f2f2fa6da1db33f9eb5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-57368

Malicious code in semanticllamaz3n npm...

MAL-2025-65271 Malicious code in semantic_llama_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0a2cbff433de2e0ed4696797847e2db454e9a146b480de5655c91134415eaab6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in semantic_llama_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0a2cbff433de2e0ed4696797847e2db454e9a146b480de5655c91134415eaab6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...