MAL-2025-190226 Malicious code in warp-ora-duplex-jekyll (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d66ff385a22dffe023d98891710432d0c59ead5f5af2c822fff70f98049abf12 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-120654

Malicious code in warp-rigel-corvus-jovian npm...

Malicious code in warp-rigel-corvus-jovian (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 80340d0570cd4df9da4c46fbe05a0e166f4adeb640cac7709f93defed837709e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-111222

Malicious code in metalsmith-warp-lacerta-cors npm...

EUVD-2025-111711

Malicious code in link-commitizen-warp-nightmare npm...

EUVD-2025-115969

Malicious code in browserify-mongodb-warp-yonder npm...

EUVD-2025-120656

Malicious code in warp-nodemon-spectron-rest npm...

EUVD-2025-120482

Malicious code in weywot-warp-carpo-less npm...

Malicious code in dione-warp-fetch-wasat (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bf8e43ad64eeff4cd931df3075d3bdd9a78a1fc7cc746534adc9f49d17a9947b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-121276

Malicious code in thuban-gemini-warp-helmet npm...

EUVD-2025-120665

Malicious code in warp-cassini-bellatrix-lint-staged npm...

EUVD-2025-120864

Malicious code in ursa-oberon-antares-warp npm...

EUVD-2025-114456

Malicious code in dione-warp-fetch-wasat npm...

Malicious code in jsonp-charon-warp-fetch (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 81c33c6c2772ea53aa5ecd5175c851302123b223a7990f46762cba9948111efd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-111407

Malicious code in markdown-pdf-sqlite-zephyr-warp npm...

Malicious code in wasat-warp-apollo-leda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8cd93a066455a605174fc758b22b8487262f6e9ca5639cd5ee67485076eb00d2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-120624

Malicious code in wasat-warp-apollo-leda npm...

MAL-2025-147936 Malicious code in sirius-aurora-warp-native (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e5daf0e0b031d2cf938436afe95c35e412c219634f9978e99bd972480618c7d6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139837 Malicious code in axios-protractor-loglevel-warp (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 52d16a7033d42bdb4fbfafe22f856e5fb27e0364dea6cc4a01772b651a18961d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148652 Malicious code in thuban-gemini-warp-helmet (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 053181b6ef8d4f7582c97fb9eedaae20888f1ba3d215dbe01398d3b7c6460911 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...