MAL-2025-188063 Malicious code in mira-wolf-prompts-got (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bde8f3e3019d1490a0c886c455ef3b5c6532daa56f5ab4b1b118ae0302331f78 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-179256

Malicious code in dotenv-safe-sedimentology-wolf-singularity npm...

EUVD-2025-177004

Malicious code in prompts-jasmine-wolf-duplex npm...

MAL-2025-188117 Malicious code in mongoose-wolf-deimos-forever (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 278e4a12ef49eb23953dc1bea73ef37ad5b5174a325aaebbabb2faba7c8c204b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-175759

Malicious code in ursa-readable-astrophysics-wolf npm...

MAL-2025-189326 Malicious code in sagitta-wolf-barnard-geckodriver (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 087da970166c0f101f1d299c7a994960afe6bf59968564c9c7b8f32b29c733d6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189940 Malicious code in titan-link-wolf-unuk (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e5635cb19cc5d81c41aa823641a3e6ce5b8e942e8d03a61f99c85afc4412e62e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187188 Malicious code in global-upgrade-wolf-betelgeuse (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9f36eabf70e6a0498bc947c1d4011bf05f67eb39c3e4010c7ab28a2b04e317f4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-124850

Malicious code in mocha-ariel-wolf-auriga npm...

EUVD-2025-122653

Malicious code in repository-less-loader-wolf-reveal-md npm...

EUVD-2025-116906

Malicious code in achernar-eris-halley-wolf npm...

EUVD-2025-116670

Malicious code in antares-polaris-vuetify-wolf npm...

EUVD-2025-120368

Malicious code in wolf-sequelize-gatsby-node-config npm...

EUVD-2025-120379

Malicious code in wolf-loglevel-hyperion-proxima npm...

EUVD-2025-113192

Malicious code in gemini-wolf-subscription-adonis npm...

EUVD-2025-120384

Malicious code in wolf-dotenv-safe-init-process npm...

Malicious code in rollup-plugin-wolf-markdownlint-pegasus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 222d123b487722773c7b51ea9a77bce422d0904ebd8025372361611319272dab This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-124863

Malicious code in miranda-resolvers-wolf-xanadu npm...

EUVD-2025-123282

Malicious code in promise-global-wolf-arcturus npm...

EUVD-2025-120280

Malicious code in xenon-mensa-wolf-csrf npm...