EUVD-2025-179637

Malicious code in commitlint-betelgeuse-yaml-indus npm...

EUVD-2025-178290

Malicious code in java-short-string-java-yaml npm...

EUVD-2025-176163

Malicious code in subduction-pulsar-yaml-janus npm...

EUVD-2025-176636

Malicious code in rigel-photon-interferometry-yaml npm...

EUVD-2025-175451

Malicious code in yaml-halley-astrobiology-mutation npm...

EUVD-2025-177024

Malicious code in procyon-yaml-figures-toml npm...

EUVD-2025-179070

Malicious code in eridanus-react-bootstrap-telesto-yaml npm...

EUVD-2025-179791

Malicious code in chakra-ui-sadr-yaml-less-loader npm...

EUVD-2025-176214

Malicious code in static-refactor-grep-yaml-emulate npm...

EUVD-2025-175450

Malicious code in yaml-iota-jasmine-norma npm...

EUVD-2025-175448

Malicious code in yaml-notify-authorize-code-web npm...

EUVD-2025-180349

Malicious code in archaeometry-yaml-phoebe-ophiuchus npm...

EUVD-2025-177498

Malicious code in object-chi-yaml-authorize-zero npm...

EUVD-2025-176757

Malicious code in refactor-cron-yaml-dog-debug npm...

Malicious code in chakra-ui-sadr-yaml-less-loader (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3a073ff2d6f60d319212474b26295e2faeab06927317a907039f5600ac134ae0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187755 Malicious code in less-loader-gulp-yaml-crust (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a37ba6b2766ddc09a8955e32126156706d18cd48cf81fa1da83c4c563b856dfc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186704 Malicious code in electron-postcss-loader-yaml-pyxis (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e8dd6b06620bf85f280ff8659339047adecb9bcdc503d3a50fafb169483256ed This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186980 Malicious code in final-scale-static-yaml-debug (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a6ba87a36ae06fd4997f24c35c4cf6157601dad069a9c57e6ae8d43cc88aa435 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186091 Malicious code in chakra-ui-sadr-yaml-less-loader (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3a073ff2d6f60d319212474b26295e2faeab06927317a907039f5600ac134ae0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-190421 Malicious code in yaml-barnard-jekyll-magnetar (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 647bcb1618cd7231944ee6afbd42020458061895e8490b3d485d6225634c630e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...