MAL-2025-149270 Malicious code in warp-jwt-postcss-local (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 20e9ab47f0b83fb7255c5c651a96f89e85ee9000c6a622634dd55b0b7c05f575 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142370 Malicious code in express-cassini-warp-soap (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ddd22234b7a86537f1ae17969398bec86c8f6bda4b4fed0732595138012dbb89 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147583 Malicious code in sagitta-bunyan-warp-remark (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f758f8e3c3b06dd11f060896d9934e304f95b6d59d51eb8e698da76bbb918705 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-122097

Malicious code in semantic-release-google-warp-vuetify npm...

Malicious code in deneb-warp-foundation-levels (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c2da07786b07f1080bf68eef9f1d567aa7e1c425ad990827531418dbb2973611 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-124886

Malicious code in miranda-europa-development-warp npm...

EUVD-2025-123909

Malicious code in pavo-taurus-miranda-warp npm...

Malicious code in electron-builder-nconf-warp-fetch (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f7ab9cac20e5a2bc0455289471d23484573238aefff23152f6ba6ad37ef8acf5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-114929

Malicious code in cosmiconfig-firebase-warp-subscription npm...

EUVD-2025-123087

Malicious code in pulsar-jwt-warp-morgan npm...

EUVD-2025-120624

Malicious code in wasat-warp-apollo-leda npm...

Malicious code in wasat-warp-apollo-leda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8cd93a066455a605174fc758b22b8487262f6e9ca5639cd5ee67485076eb00d2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-115731

Malicious code in canopus-vortex-fornax-warp npm...

EUVD-2025-122339

Malicious code in sagitta-bunyan-warp-remark npm...

Malicious code in warp-ursa-kastra-centauri (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8b98d11f27a0a6ade7b53275ff1860902cdfd84ce6a16f09337ebb7895eb0160 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-120665

Malicious code in warp-cassini-bellatrix-lint-staged npm...

EUVD-2025-120668

Malicious code in warp-avior-html-webpack-plugin-webpack npm...

EUVD-2025-122520

Malicious code in restart-xanadu-warp-semantic-release npm...

Malicious code in restart-xanadu-warp-semantic-release (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8ef6a6937beac37bffe0da97267ff730eeaff6a6a16415d03fc4bc0e4647f464 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in browserify-mongodb-warp-yonder (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4bcea7f98466fdbf3d3aeb4d3ae1d9b4af8d3c18fff6a8bb0161b6f3c33db726 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...