MAL-2025-190226 Malicious code in warp-ora-duplex-jekyll (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d66ff385a22dffe023d98891710432d0c59ead5f5af2c822fff70f98049abf12 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-120654

Malicious code in warp-rigel-corvus-jovian npm...

Malicious code in warp-rigel-corvus-jovian (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 80340d0570cd4df9da4c46fbe05a0e166f4adeb640cac7709f93defed837709e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-111222

Malicious code in metalsmith-warp-lacerta-cors npm...

EUVD-2025-111711

Malicious code in link-commitizen-warp-nightmare npm...

EUVD-2025-115969

Malicious code in browserify-mongodb-warp-yonder npm...

EUVD-2025-120656

Malicious code in warp-nodemon-spectron-rest npm...

EUVD-2025-120482

Malicious code in weywot-warp-carpo-less npm...

Malicious code in dione-warp-fetch-wasat (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bf8e43ad64eeff4cd931df3075d3bdd9a78a1fc7cc746534adc9f49d17a9947b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-121276

Malicious code in thuban-gemini-warp-helmet npm...

EUVD-2025-120665

Malicious code in warp-cassini-bellatrix-lint-staged npm...

EUVD-2025-120864

Malicious code in ursa-oberon-antares-warp npm...

EUVD-2025-114456

Malicious code in dione-warp-fetch-wasat npm...

EUVD-2025-111407

Malicious code in markdown-pdf-sqlite-zephyr-warp npm...

EUVD-2025-120624

Malicious code in wasat-warp-apollo-leda npm...

Malicious code in warp-avior-html-webpack-plugin-webpack (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b11f9b6bfc7e569e71fb19a7e5a3323ecd22de9a47e30dbccd610e408eebd4c3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-120666

Malicious code in warp-callisto-library-phoebe npm...

Malicious code in axios-protractor-loglevel-warp (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 52d16a7033d42bdb4fbfafe22f856e5fb27e0364dea6cc4a01772b651a18961d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-120653

Malicious code in warp-ursa-kastra-centauri npm...

Malicious code in triton-warp-sadr-nightmare (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 35331c67a6aab3844581bef9af31dc1788bfa6ce621c2bc35bf4a872a88a6cd7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...