EUVD-2025-114714

Malicious code in cypress-config-slides-warp npm...

Malicious code in cosmiconfig-firebase-warp-subscription (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4eee21f35eb9805d7f31c7f493c82f906f9774634ec1b223e8d3c7fafec2331c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-121991

Malicious code in shelljs-warp-mongoose-betelgeuse npm...

Malicious code in cypress-config-slides-warp (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 214c58c5a1e1cb8e20223d49c624598458804d16b243f437a703aa7f149046d5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-112120

Malicious code in jsonp-charon-warp-fetch npm...

EUVD-2025-120260

Malicious code in xenon-warp-luna-perseus npm...

EUVD-2025-120659

Malicious code in warp-jwt-postcss-local npm...

Malicious code in cordelia-chalk-warp-reveal-md (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d3c68d77b2e4bd7da1bdfd033d264b648eddcfa07a88b91b57c2db7dfc573149 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in pulsar-jwt-warp-morgan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bd00432a3cb61697434444346db1e5751897caf37a0cf6a2424a28362411bc32 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in express-cassini-warp-soap (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ddd22234b7a86537f1ae17969398bec86c8f6bda4b4fed0732595138012dbb89 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-114547

Malicious code in deneb-warp-foundation-levels npm...

EUVD-2025-111407

Malicious code in markdown-pdf-sqlite-zephyr-warp npm...

EUVD-2025-116737

Malicious code in altair-sails-izar-warp npm...

EUVD-2025-116165

Malicious code in bellatrix-figures-mongodb-warp npm...

Malicious code in warp-dagda-antd-scripts (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 264c22b5aaf174fd3e7207d8c30036247f754b17db2f75f89a85ca62322bbc24 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-120657

Malicious code in warp-miranda-dotenv-safe-duplex npm...

EUVD-2025-124727

Malicious code in morgan-warp-gacrux-jest npm...

MAL-2025-145828 Malicious code in ophiuchus-mongoose-warp-wolf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 40fecd700567c4dcd4a37b5555359b2c372b61412335ed0d6f7bb32150d51446 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148059 Malicious code in socketio-meteor-warp-apollo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c1968894fa7e96f8475532a15681d64684abb98aeeffeda42d690bad5dbdf93c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144216 Malicious code in kronos-deimos-regulus-warp (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 28b31749f80770b26fa35f08da80af73a65c32d2878ca4298b76f5e4c6188b04 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...