697 matches found
EUVD-2025-111711
Malicious code in link-commitizen-warp-nightmare npm...
Malicious code in relay-relay-development-warp (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4454d28b4417cf1585f11385fdf6849980ca26868ff80b8c93180b4c03d586ac This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in jsonp-charon-warp-fetch (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 81c33c6c2772ea53aa5ecd5175c851302123b223a7990f46762cba9948111efd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-124254
Malicious code in nova-sirius-warp-csv npm...
EUVD-2025-120106
Malicious code in yildun-warp-orbit-neptune npm...
EUVD-2025-123087
Malicious code in pulsar-jwt-warp-morgan npm...
EUVD-2025-112120
Malicious code in jsonp-charon-warp-fetch npm...
MAL-2025-145828 Malicious code in ophiuchus-mongoose-warp-wolf (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 40fecd700567c4dcd4a37b5555359b2c372b61412335ed0d6f7bb32150d51446 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-148652 Malicious code in thuban-gemini-warp-helmet (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 053181b6ef8d4f7582c97fb9eedaae20888f1ba3d215dbe01398d3b7c6460911 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-140135 Malicious code in browserify-mongodb-warp-yonder (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4bcea7f98466fdbf3d3aeb4d3ae1d9b4af8d3c18fff6a8bb0161b6f3c33db726 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-139665 Malicious code in atlas-uninstall-warp-thuban (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f056ab6718343f1a83f1b078d53bc6fb1719a925893e09a02b5f7671b1a1c2db This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-149270 Malicious code in warp-jwt-postcss-local (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 20e9ab47f0b83fb7255c5c651a96f89e85ee9000c6a622634dd55b0b7c05f575 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-149272 Malicious code in warp-miranda-dotenv-safe-duplex (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 80317c7fc94a190b4d25aed1cf7debd1e50850ffdba9006e735040a27210339c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-141180 Malicious code in cosmiconfig-firebase-warp-subscription (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4eee21f35eb9805d7f31c7f493c82f906f9774634ec1b223e8d3c7fafec2331c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-144216 Malicious code in kronos-deimos-regulus-warp (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 28b31749f80770b26fa35f08da80af73a65c32d2878ca4298b76f5e4c6188b04 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in pulsar-jwt-warp-morgan (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bd00432a3cb61697434444346db1e5751897caf37a0cf6a2424a28362411bc32 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-122714
Malicious code in relay-relay-development-warp npm...
EUVD-2025-120663
Malicious code in warp-comet-csrf-slidev npm...