MAL-2025-147427 Malicious code in reveal-md-yildun-auth0-cz-conventional-changelog (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2c68fcbf2185e5309c5a9155f27935e9e2c4ed747ea9ecf3bdb711d8364e0e1d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146863 Malicious code in puppeteer-repository-pino-non-blocking (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bdee3ffee1d89db096308708e2d9aa183d3687f0848cdd526e9576ca308d27ab This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in quantum-commitlint-config-angular-event-firebase (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1ac0610553b6d391b26ea61da0ebe011f1788f208b501fa46e2ed0c1f3ff7bce This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141566 Malicious code in dependencies-envconfig-bootes-postgres (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c603800bbff9b6886548978ff6df941a13ca7f23109be574c0f203af1e116c31 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141357 Malicious code in csv-schema-alphard-taurus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 73a9b936ae6b74c7d7229c33b08bcb2aa9deea6014c2edfef4494e291ec250af This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148064 Malicious code in socketio-sedna-centauri-atlas (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 81bf5c1589ac18e2c3471d0274bbd2f7da00cb75993fd0a325f908768672968c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145115 Malicious code in module-run-script-telesto-writable (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aae8e775647732194d6b76c1473464110ee5ca19028fc5f1464b33e020e37ce4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145052 Malicious code in miranda-rehype-node-config-docusaurus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5c0be5e287facc7d63ef649739c481d1c712a604f3ece8ab28184f4a2ab2188d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139509 Malicious code in apollo-element-ui-magellan-sedna (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ba972a9af2c18c32af8952189c8f1f93988448b04dfd8f4e96bace6ca92a2058 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144202 Malicious code in koa-process-gatsby-stream (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 798a18987a0275abf563f2f66f0c42262f0a090747f34fcd6f0305174adf9131 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142954 Malicious code in global-zenith-child-process-await (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0fc3e9083ac9cc969092f7cd408f8a229dfb5f42f62b6082200569f22f0c57fd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143869 Malicious code in jasmine-uglify-js-cygnus-markdown (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a68c8187bb9a4d759fc7a92576e1862dc9d507e32cff5c91a862a9c51dba18dc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140710 Malicious code in chariklo-repository-jwt-norma (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 56fea57889a7f92291e93dd44d909bffc52d0e32fe475648db6b324b9e472e1d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147319 Malicious code in resolvers-celeste-antd-sequelize (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 73e4cef15b804d34241feea86545e5b71b9cb1ccf014f30da9512e79a4b156da This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148575 Malicious code in test-mui-fomalhaut-elara (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ca2f736890bb161d7829091a44884c79fc095594c2c5cf79d556a77560a690d3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141037 Malicious code in config-puppeteer-spica-jupiter (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5c91cc0f7b3784492f428d41a716eb3d3b4bd1739e61db8769681c5e6d90d167 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139169 Malicious code in acamar-cosmos-start-request (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3efa5ae8bc81623cf737a4266be3ae0e7ad05a0df1ec0880493ee4f35ccb7ae1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142860 Malicious code in geckodriver-chai-hyperion-husky (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8c79d495abb6c1e5b082bab2c49a939c1066d9169d018a55eca80c287333b651 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141632 Malicious code in development-server-electron-builder-hermes (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b5665caf467f0f567035e4af0bc17752525fe75d750c4233aaaadc7d9522ecd2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144495 Malicious code in local-registry-vega-prettier-plugin-markdown (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 67d6c344890d104e2d2a94b05422b2650f4a863a1a96482482518e7cd26a644d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...