EUVD-2025-122106

Malicious code in selenium-warp-deneb-winston npm...

EUVD-2025-116265

Malicious code in axios-protractor-loglevel-warp npm...

Malicious code in relay-relay-development-warp (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4454d28b4417cf1585f11385fdf6849980ca26868ff80b8c93180b4c03d586ac This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-124727

Malicious code in morgan-warp-gacrux-jest npm...

Malicious code in node-config-warp-resolvers-tethys (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bf522e96176b7020c00c11bb3927f3ecf1a99cc38ef425afef2524f03f8315ec This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-111746

Malicious code in levels-warp-mongodb-slides npm...

Malicious code in thuban-gemini-warp-helmet (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 053181b6ef8d4f7582c97fb9eedaae20888f1ba3d215dbe01398d3b7c6460911 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-112492

Malicious code in init-gemini-cassini-warp npm...

EUVD-2025-113500

Malicious code in fornax-commitlint-config-angular-commitlint-warp npm...

EUVD-2025-120663

Malicious code in warp-comet-csrf-slidev npm...

EUVD-2025-124886

Malicious code in miranda-europa-development-warp npm...

EUVD-2025-116182

Malicious code in barnard-warp-auth0-canopus npm...

EUVD-2025-116194

Malicious code in barnard-hyperion-warp-dagda npm...

EUVD-2025-115012

Malicious code in cordelia-chalk-warp-reveal-md npm...

MAL-2025-149263 Malicious code in warp-callisto-library-phoebe (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 30970dd99405b0fed1c24b38ff81cc49d20d1d6fa08cc6823785173984de12cf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140135 Malicious code in browserify-mongodb-warp-yonder (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4bcea7f98466fdbf3d3aeb4d3ae1d9b4af8d3c18fff6a8bb0161b6f3c33db726 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145828 Malicious code in ophiuchus-mongoose-warp-wolf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 40fecd700567c4dcd4a37b5555359b2c372b61412335ed0d6f7bb32150d51446 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141180 Malicious code in cosmiconfig-firebase-warp-subscription (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4eee21f35eb9805d7f31c7f493c82f906f9774634ec1b223e8d3c7fafec2331c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-122520

Malicious code in restart-xanadu-warp-semantic-release npm...

Malicious code in cypress-config-slides-warp (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 214c58c5a1e1cb8e20223d49c624598458804d16b243f437a703aa7f149046d5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...