MAL-2025-147826 Malicious code in semantic-release-google-warp-vuetify (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector befc3050b341d286101261fec11b2cb358d3994e132344a3ffd96727445879e5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147014 Malicious code in radiant-equinox-pm2-restart (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1dfdbb60037d98cb4076c74dcd46b2323884f2253eb379e85db9ad413affc169 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145887 Malicious code in ora-jest-nodemon-levels (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 726bd6f462678ed62b14d8518574a76259ec9497d7eb5ddd9ff6de89b9f8dd22 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143959 Malicious code in jovian-rollup-plugin-jest-polaris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5f53370f26cf3478ba29cfe3709afd2de86c87b49aacc771a6ad02106cda567c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145827 Malicious code in ophiuchus-metalsmith-apollo-fomalhaut (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 80e7e51a83f23a65a177aa0973d2ad88d24a3da3dda667c7cf1f4228fbb52357 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140058 Malicious code in blitz-pulsar-bootes-dagda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f143c148c7e4c8e2bb84556a6a8e227304fefdc3d346c1b959bf9c04f6f75559 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146063 Malicious code in pegasus-vulcan-framework-pino (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f49c20d826fc3caba360e82a06dd11069ea8cb60d4ffcfa801f351b1e7f5717c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141004 Malicious code in concurrently-deimos-scorpius-kaus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 417930b3a430052e342e5f69a99cbf6ba77c60440316b9ce057c1d09105f7c73 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141555 Malicious code in deneb-quark-dotenv-safe-await (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 79765b50847846187d16a72a0ce89db9097d30c7599971e7283f47b87b0a8334 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149078 Malicious code in ursa-venus-terser-luna (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8e21328f1d7d1ad0ab1a8c517d9028d0de2ec3dc3364feead5e8eace5a4d4288 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146831 Malicious code in pulsar-farout-pegasus-publish (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 936458586d508d170d49bbd490dbb216acb183554cece11d629cd5fddeff09bf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140200 Malicious code in bulma-achernar-babel-bulma (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 216ae8f8602dbed565afeda662df33d3b107653d5903360708f4ba454d0ecc85 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145199 Malicious code in mui-cypress-blitz-cygnus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 991e983f3904a6d0ef9d7df604599d90c9d1225c9f60e4d425316250f0264ed1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147595 Malicious code in sagitta-europa-xerxes-relay (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 71b016074ca2bf81d31113e17620b1a0ae9d8d9e1abef97cc8f872badf16e6e1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148300 Malicious code in stop-package-phenomic-cz-conventional-changelog (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8dc099d38b27f19ea7c371913a1c7be9ca31b14fcc5d5c992ed20417fdc8eea1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149298 Malicious code in wasat-public-commitlint-node-sass (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 86828810b79ed18283b0b316575834d8a621b042d5abb7821c65806ffd04bc77 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147506 Malicious code in rollup-package-duplex-superagent (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 821c407ff719dc4afe450356edd924866833272548005ebb50e5b1f4254670c0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146728 Malicious code in proxima-playwright-callisto-toml (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2488440f05aba5c3a89637e1d59dcff2f15bd876c0782bf4ada4b5462f82c989 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141282 Malicious code in csrf-cressida-graphql-rest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3f0f8102da823f1598bea95658a11ba091cd8ae0d45480aba1cafb8d24307920 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142675 Malicious code in foundation-vortex-semantic-ui-astro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 326fc01021205b3e567805f4fd529b0b14559710cce5370242b5556050f9648e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...