MAL-2025-147821 Malicious code in semantic-release-backend-scripts-publish (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fe3df3fc402b54693afaf15ba26eee4688a1020285588b66a7cf0e0431a7f767 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147338 Malicious code in rest-altair-csrf-arcturus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 10d12f9c3117cd64df99f3421c074d81f3494830740d567162b1decb6a9b9850 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147298 Malicious code in request-kronos-elektra-stop (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 34120f381757b55e7a773b70ae46151f71974274ab08bcc6382fb88fc45bb9df This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147124 Malicious code in registry-eris-grunt-jasmine (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7589992e4db8381ae4a8bb741b6a5cc07e702fcf848a2966e18024222885cf17 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139878 Malicious code in backend-barnard-galaxy-foundation (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a59049d351727bffb49a3667c44626a812f06adf443b2fdef5596e01172355a6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143184 Malicious code in hapi-impulse-dotenv-parse-variables-prettier-plugin-markdown (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 47665784ad522eb04cacf6b2f03e8ae0ac57786dd4012aa6cff0c9b286a13ecc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149381 Malicious code in webdriverio-relay-update-deneb (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cb35cd4a8696fdf25e749474ec557164531cbf2d0d80b09118786fac9cb70fa1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149295 Malicious code in wasat-mui-sadr-nodejs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f0f3d8a941c3cd94b52f529a2a61733938e427dfadb021a5552b6cdffe5d6a31 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145586 Malicious code in nodemon-nconf-sadr-vuepress (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f4215f518cf4f67b2a4ca990aca5c7accd321716a0fb582b8f272463bd9d9bdb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148180 Malicious code in spica-spinner-rimraf-process (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d44d87ec4e5f35f7aac34b2013148340f8da18a20c969c2efad234a7f9588de8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143921 Malicious code in jest-electron-leda-electron (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4afc2c02941b782a02116d029cc9e08d731431e5460f9652b303b188bbed9458 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141987 Malicious code in element-ui-winston-html-webpack-plugin-npm (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 533d17b064934bf10be2328e4f60324b7af8f0958bb35f3d23e89346174c51ff This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142918 Malicious code in gemini-server-ini-sagitta (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f6f5d0360722cdc73ccb7eac133b17b09cfa918f7f0436c2a0cfa464bd4b5a0b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144686 Malicious code in markdown-pdf-cache-apollo-cluster (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9b3815f58127f89e6f52171beee5149e5ca18d95ab4a7b7434c014b0b5595525 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147441 Malicious code in rigel-tailwindcss-electron-bunyan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b77df21c4788f9beed086cb88985b131d710bcd6382aa8167fedc0aac70f5366 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139547 Malicious code in aquarius-sagitta-delphinus-lacerta (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d591d1973e0d501c44c5aed9f6e6e63246cb03c6205caaad5d1213a3263e4f43 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148515 Malicious code in terser-css-minimizer-webpack-plugin-loglevel-jasmine (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7935d20d07e495cdcbab1cc3dda880187161dadfe8d56c02d11fa5e642119489 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147126 Malicious code in registry-firebase-command-sync (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c46f43b2202cbe2a8592e3b893efb2582549b714f2c71fcf8dc94508d348bae6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146791 Malicious code in publish-karma-ora-node-config (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0e61492f607b131464a50e46955f975b174ad6ba550ef711b084bae657885117 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139719 Malicious code in auth-css-loader-node-sass-gacrux (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f99a2e6d84ab0f17f54374c0b9562b0a16562928b0e7327a3436d9e2b0320a31 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...