697 matches found
EUVD-2025-124781
Malicious code in mongodb-prettier-stylelint-warp-google npm...
EUVD-2025-114714
Malicious code in cypress-config-slides-warp npm...
EUVD-2025-111859
Malicious code in lacerta-warp-perseus-forever npm...
EUVD-2025-115532
Malicious code in ceres-rollup-warp-helios npm...
EUVD-2025-122520
Malicious code in restart-xanadu-warp-semantic-release npm...
Malicious code in restart-xanadu-warp-semantic-release (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8ef6a6937beac37bffe0da97267ff730eeaff6a6a16415d03fc4bc0e4647f464 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-116437
Malicious code in atlas-uninstall-warp-thuban npm...
EUVD-2025-111711
Malicious code in link-commitizen-warp-nightmare npm...
Malicious code in relay-relay-development-warp (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4454d28b4417cf1585f11385fdf6849980ca26868ff80b8c93180b4c03d586ac This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in jsonp-charon-warp-fetch (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 81c33c6c2772ea53aa5ecd5175c851302123b223a7990f46762cba9948111efd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-143993 Malicious code in jsonp-charon-warp-fetch (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 81c33c6c2772ea53aa5ecd5175c851302123b223a7990f46762cba9948111efd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-148059 Malicious code in socketio-meteor-warp-apollo (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c1968894fa7e96f8475532a15681d64684abb98aeeffeda42d690bad5dbdf93c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-141180 Malicious code in cosmiconfig-firebase-warp-subscription (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4eee21f35eb9805d7f31c7f493c82f906f9774634ec1b223e8d3c7fafec2331c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-149277 Malicious code in warp-xanadu-nconf-vuetify (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7f1a6f890cf0e2133ef4b2bfa33988c3f3bba177346a6626af0630d5b8c70f53 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-147402 Malicious code in restart-xanadu-warp-semantic-release (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8ef6a6937beac37bffe0da97267ff730eeaff6a6a16415d03fc4bc0e4647f464 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-149270 Malicious code in warp-jwt-postcss-local (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 20e9ab47f0b83fb7255c5c651a96f89e85ee9000c6a622634dd55b0b7c05f575 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-148830 Malicious code in triton-warp-sadr-nightmare (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 35331c67a6aab3844581bef9af31dc1788bfa6ce621c2bc35bf4a872a88a6cd7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-140135 Malicious code in browserify-mongodb-warp-yonder (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4bcea7f98466fdbf3d3aeb4d3ae1d9b4af8d3c18fff6a8bb0161b6f3c33db726 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...