MAL-2025-146282 Malicious code in playwright-library-build-yaml (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector accd70c1139e0458aefe8218d3b4dbe2ab9d2ed5d6838ed332328f9a10b2e2f8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147703 Malicious code in scorpius-browserify-yaml-eris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5520ce8e10cec277d3fefc983acdc1fff0ed1222ccab56f5b7e4b83689c4da72 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141304 Malicious code in css-loader-gridsome-postcss-loader-yaml (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b76708fe5d0a2195e1d55421d5eb35a7bfcffe8ce7ea160c4bdd464e0fe4702b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146817 Malicious code in publish-stream-radiant-yaml (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 017d207c1d0a9323b05f24974015e02bb9f98d35f470de400a2f2b78c0d893b5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146427 Malicious code in postcss-yaml-lynx-build (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b7991fb1fffadbc9283f03779f51fa19d71c12c033f9ba3a11c26f4941dcd670 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149797 Malicious code in yaml-nightmare-command-start (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 22757024aa3a3d10664748a50311b9182e726fc4abcde0b54f43b750cb3c57c2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149535 Malicious code in winston-yaml-webdriver-mocha-repository (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0f2aafd2c598a36174246ed2a93655569ec5e247c8ea65d7573cc259e57155be This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mensa-antares-yaml-jasmine (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2158db6a93e45b802d98978535699fb91afd8047a20243a62aaf72204c09e35a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sedna-carpo-yaml-server (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8b7c4c234095f395661d4444c8c4bcc25c5188dc121201acf2d56d355773a35a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-122378

Malicious code in run-script-got-cross-env-yaml npm...

EUVD-2025-113032

Malicious code in grunt-yaml-testcafe-tailwindcss npm...

Malicious code in aether-yaml-xo-xo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7c20e47718448bce7c573adc07c43b188fb04cbebc66faf58d7f02e82169fc8f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-120133

Malicious code in yaml-nodemon-spectron-pino npm...

EUVD-2025-121816

Malicious code in spectron-bootstrap-yaml-iota npm...

EUVD-2025-123265

Malicious code in promise-yaml-scripts-quark npm...

Malicious code in antd-yaml-rate-limiter-zenobia (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6412d07eb97a4f89d1264c3ef0f67ce293e3a765abdab4583afe95d08ead7e52 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139582 Malicious code in ariel-cluster-yaml-vega (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a4ef61cd59299c1e1e48712456761e4f094ccf8cc370ac9410fc8892b0e60bc6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142043 Malicious code in enceladus-yaml-thuban-achernar (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e46781eef16c099e80d02af004a2d27414141e970c47df84b2291f9f5e131859 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-120149

Malicious code in yaml-aquarius-xenos-neptune npm...

MAL-2025-142397 Malicious code in express-yaml-ophiuchus-pino-pretty (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6056cfafb6afc410e65e15b7b4d2d799927e7102ac66c802357d7e0e2396c2ce This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...