MAL-2025-141304 Malicious code in css-loader-gridsome-postcss-loader-yaml (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b76708fe5d0a2195e1d55421d5eb35a7bfcffe8ce7ea160c4bdd464e0fe4702b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147703 Malicious code in scorpius-browserify-yaml-eris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5520ce8e10cec277d3fefc983acdc1fff0ed1222ccab56f5b7e4b83689c4da72 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146282 Malicious code in playwright-library-build-yaml (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector accd70c1139e0458aefe8218d3b4dbe2ab9d2ed5d6838ed332328f9a10b2e2f8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-121953

Malicious code in sirius-repository-yaml-oberon npm...

EUVD-2025-120147

Malicious code in yaml-avior-scorpius-mutation npm...

EUVD-2025-116476

Malicious code in async-hugo-yaml-rimraf npm...

EUVD-2025-111755

Malicious code in levels-npm-yaml-xanadu npm...

EUVD-2025-120142

Malicious code in yaml-foundation-antares-zenith npm...

EUVD-2025-113777

Malicious code in event-yaml-scorpius-ora npm...

EUVD-2025-116631

Malicious code in antd-yaml-rate-limiter-zenobia npm...

EUVD-2025-122728

Malicious code in rehype-yaml-tailwindcss-levels npm...

MAL-2025-149535 Malicious code in winston-yaml-webdriver-mocha-repository (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0f2aafd2c598a36174246ed2a93655569ec5e247c8ea65d7573cc259e57155be This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in yaml-gatsby-yildun-less (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9176cc856a7e1b77aae4968733ab2bea8d8ddf71d2233a9e6f1ef1c0f9e0646f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-120129

Malicious code in yaml-prettier-css-minimizer-webpack-plugin-cosmiconfig npm...

EUVD-2025-123105

Malicious code in publish-stream-radiant-yaml npm...

EUVD-2025-120363

Malicious code in wolf-yaml-morgan-cross-env npm...

EUVD-2025-120148

Malicious code in yaml-arcturus-postgres-jabbah npm...

EUVD-2025-121099

Malicious code in triton-taurus-callisto-yaml npm...

EUVD-2025-120128

Malicious code in yaml-publish-dependencies-eslint-plugin npm...

MAL-2025-146427 Malicious code in postcss-yaml-lynx-build (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b7991fb1fffadbc9283f03779f51fa19d71c12c033f9ba3a11c26f4941dcd670 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...