MAL-2025-139445 Malicious code in antares-update-local-wolf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b9335bf34e29aff95b40150f9ab768d4236f18c06f1a2c716c85d8d49af20364 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149554 Malicious code in wolf-ophiuchus-eslint-config-framework (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 70067f59028c148db888ac9fc27d2a76217a56f8ecedee3af5f4f81c07c29e13 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-120373

Malicious code in wolf-pm2-nightmare-tethys npm...

EUVD-2025-121581

Malicious code in style-loader-wolf-elara-nconf npm...

EUVD-2025-124863

Malicious code in miranda-resolvers-wolf-xanadu npm...

Malicious code in corvus-wolf-update-ganymede (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f31b0a4062c0783f6ddaa777bca86b4ee5d265da61c10b5f0a7b950f7bb3cdd4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-124370

Malicious code in node-sass-process-wolf-init npm...

EUVD-2025-120369

Malicious code in wolf-sagitta-geckodriver-meissa npm...

EUVD-2025-120280

Malicious code in xenon-mensa-wolf-csrf npm...

EUVD-2025-121722

Malicious code in spinner-morgan-equinox-wolf npm...

EUVD-2025-111601

Malicious code in loglevel-markdown-wolf-elektra npm...

MAL-2025-146640 Malicious code in promise-global-wolf-arcturus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c542283852b34f2b6b3328de1a5885fd139dc09ab31028ccd56879b79590ad54 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139237 Malicious code in aether-playwright-wolf-child-process (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 05a9fc87fc510023d5891e89c4d64133639279668388245675c2377c1388e4d2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149541 Malicious code in wolf-castor-rimraf-phoenix (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b53cb9c657508e7f2692c16d60d43936cc7507391d4e49684b451e4afcad2815 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149553 Malicious code in wolf-nuxtjs-mira-spica (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector be3258b064bb655bb212c29f171951d33033c240d6fe5dd0b0bc92e9898d2678 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-121237

Malicious code in titan-polaris-wolf-standard npm...

Malicious code in xenos-wolf-test-publish (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8011e9fa7911a3c8ee4489e790127e7dfc9e840dc8bc4f3c36d50a3a500058de This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in wolf-nuxtjs-mira-spica (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector be3258b064bb655bb212c29f171951d33033c240d6fe5dd0b0bc92e9898d2678 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in xenon-mensa-wolf-csrf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8db5db959af39c9edf8f563ffa5944b303521105744334beef652eec89b55a52 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141243 Malicious code in cressida-sequelize-wolf-terser-webpack-plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a5a46a9c2846a091e28a3a4dc8c51bc71bdde5de64a5745a8b0b0b66988ee9a5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...