EUVD-2025-113373

Malicious code in fusion-link-hercules-warp npm...

EUVD-2025-120659

Malicious code in warp-jwt-postcss-local npm...

EUVD-2025-112492

Malicious code in init-gemini-cassini-warp npm...

EUVD-2025-122097

Malicious code in semantic-release-google-warp-vuetify npm...

EUVD-2025-114929

Malicious code in cosmiconfig-firebase-warp-subscription npm...

EUVD-2025-122339

Malicious code in sagitta-bunyan-warp-remark npm...

EUVD-2025-116437

Malicious code in atlas-uninstall-warp-thuban npm...

EUVD-2025-121866

Malicious code in socketio-meteor-warp-apollo npm...

Malicious code in cosmiconfig-firebase-warp-subscription (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4eee21f35eb9805d7f31c7f493c82f906f9774634ec1b223e8d3c7fafec2331c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in pulsar-jwt-warp-morgan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bd00432a3cb61697434444346db1e5751897caf37a0cf6a2424a28362411bc32 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-115012

Malicious code in cordelia-chalk-warp-reveal-md npm...

EUVD-2025-115405

Malicious code in chariklo-juno-warp-local npm...

EUVD-2025-124727

Malicious code in morgan-warp-gacrux-jest npm...

EUVD-2025-121989

Malicious code in sirius-aurora-warp-native npm...

EUVD-2025-120667

Malicious code in warp-build-postcss-loader-semantic-release npm...

EUVD-2025-120260

Malicious code in xenon-warp-luna-perseus npm...

EUVD-2025-111746

Malicious code in levels-warp-mongodb-slides npm...

EUVD-2025-121098

Malicious code in triton-warp-sadr-nightmare npm...

EUVD-2025-120662

Malicious code in warp-dagda-antd-scripts npm...

Malicious code in relay-relay-development-warp (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4454d28b4417cf1585f11385fdf6849980ca26868ff80b8c93180b4c03d586ac This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...