Malicious code in node-config-warp-resolvers-tethys (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bf522e96176b7020c00c11bb3927f3ecf1a99cc38ef425afef2524f03f8315ec This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-120656

Malicious code in warp-nodemon-spectron-rest npm...

MAL-2025-139665 Malicious code in atlas-uninstall-warp-thuban (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f056ab6718343f1a83f1b078d53bc6fb1719a925893e09a02b5f7671b1a1c2db This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147936 Malicious code in sirius-aurora-warp-native (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e5daf0e0b031d2cf938436afe95c35e412c219634f9978e99bd972480618c7d6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147402 Malicious code in restart-xanadu-warp-semantic-release (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8ef6a6937beac37bffe0da97267ff730eeaff6a6a16415d03fc4bc0e4647f464 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149262 Malicious code in warp-build-postcss-loader-semantic-release (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1dad8ad4499914a024c628b190c40ae7f1c43abb2220d0b3cc416b5b887452f2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-111398

Malicious code in markdown-warp-gridsome-jovian npm...

Malicious code in warp-rigel-corvus-jovian (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 80340d0570cd4df9da4c46fbe05a0e166f4adeb640cac7709f93defed837709e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in thuban-gemini-warp-helmet (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 053181b6ef8d4f7582c97fb9eedaae20888f1ba3d215dbe01398d3b7c6460911 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-120667

Malicious code in warp-build-postcss-loader-semantic-release npm...

EUVD-2025-120106

Malicious code in yildun-warp-orbit-neptune npm...

Malicious code in jsonp-charon-warp-fetch (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 81c33c6c2772ea53aa5ecd5175c851302123b223a7990f46762cba9948111efd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in xenon-warp-luna-perseus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f9ed97c2aaeb7c26b8e9eceef631438c73865ab60574f693b31a7d75e2709ba7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-111711

Malicious code in link-commitizen-warp-nightmare npm...

EUVD-2025-124254

Malicious code in nova-sirius-warp-csv npm...

MAL-2025-143993 Malicious code in jsonp-charon-warp-fetch (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 81c33c6c2772ea53aa5ecd5175c851302123b223a7990f46762cba9948111efd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140135 Malicious code in browserify-mongodb-warp-yonder (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4bcea7f98466fdbf3d3aeb4d3ae1d9b4af8d3c18fff6a8bb0161b6f3c33db726 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148830 Malicious code in triton-warp-sadr-nightmare (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 35331c67a6aab3844581bef9af31dc1788bfa6ce621c2bc35bf4a872a88a6cd7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149277 Malicious code in warp-xanadu-nconf-vuetify (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7f1a6f890cf0e2133ef4b2bfa33988c3f3bba177346a6626af0630d5b8c70f53 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139837 Malicious code in axios-protractor-loglevel-warp (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 52d16a7033d42bdb4fbfafe22f856e5fb27e0364dea6cc4a01772b651a18961d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...