Malicious code in sedna-carpo-yaml-server (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8b7c4c234095f395661d4444c8c4bcc25c5188dc121201acf2d56d355773a35a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-124095

Malicious code in ophiuchus-loop-yaml-terser-webpack-plugin npm...

EUVD-2025-120143

Malicious code in yaml-express-cors-gridsome npm...

EUVD-2025-120127

Malicious code in yaml-tailwindcss-hyperion-public npm...

EUVD-2025-114771

Malicious code in css-minimizer-webpack-plugin-yaml-sails-test npm...

EUVD-2025-114454

Malicious code in docusaurus-apollo-procyon-yaml npm...

MAL-2025-146833 Malicious code in pulsar-html-webpack-plugin-yaml-passport (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector de284ef22c3d79d0eb08d849bacc79b6b331418af35f35cdf63627b30baba057 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142043 Malicious code in enceladus-yaml-thuban-achernar (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e46781eef16c099e80d02af004a2d27414141e970c47df84b2291f9f5e131859 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139582 Malicious code in ariel-cluster-yaml-vega (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a4ef61cd59299c1e1e48712456761e4f094ccf8cc370ac9410fc8892b0e60bc6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149798 Malicious code in yaml-nodemon-spectron-pino (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 89819993aed0670a8dded4f811d832852c1a52c89aca9af1031cc6d0bd7ca03b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144478 Malicious code in lint-yaml-sirius-soap (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 69f697afb55745f73d83f2c2e7a513631930d27a425ade00cad76a2abd531734 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148109 Malicious code in spectron-bootstrap-yaml-iota (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f3f56029d7ba08a16d0e0186ed582f9e0eee3faf4dd11a94341de93ca17195cb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-123089

Malicious code in pulsar-html-webpack-plugin-yaml-passport npm...

Malicious code in canopus-proxima-yaml-puppeteer (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dab40b667df69aafddc22f108f2d07a25f78edad369a93fe46cb65cacb2f989a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-112101

Malicious code in jsonp-vuetify-enif-yaml npm...

EUVD-2025-120481

Malicious code in weywot-xanadu-yaml-install npm...

EUVD-2025-114805

Malicious code in css-loader-gridsome-postcss-loader-yaml npm...

EUVD-2025-116368

Malicious code in auth-yaml-slides-socketio npm...

EUVD-2025-111636

Malicious code in lint-yaml-sirius-soap npm...

Malicious code in yaml-aquarius-xenos-neptune (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 877cdd5782a7ccd2ad4094b243a61df1ee126983b9a2415a077d58e1353944f7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...