EUVD-2025-120840

Malicious code in vega-draco-yaml-html-webpack-plugin npm...

EUVD-2025-113777

Malicious code in event-yaml-scorpius-ora npm...

EUVD-2025-113416

Malicious code in framework-wolf-yaml-electron-builder npm...

EUVD-2025-116631

Malicious code in antd-yaml-rate-limiter-zenobia npm...

EUVD-2025-124494

Malicious code in nextjs-xml-yaml-fork npm...

EUVD-2025-122435

Malicious code in rocket-yaml-vortex-rollup-plugin npm...

EUVD-2025-120147

Malicious code in yaml-avior-scorpius-mutation npm...

EUVD-2025-120131

Malicious code in yaml-perseus-lyra-weywot npm...

EUVD-2025-121953

Malicious code in sirius-repository-yaml-oberon npm...

EUVD-2025-120142

Malicious code in yaml-foundation-antares-zenith npm...

EUVD-2025-122728

Malicious code in rehype-yaml-tailwindcss-levels npm...

Malicious code in yaml-foundation-antares-zenith (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a0a67ec3a64d3a7650a12669ab6c5ae42927f3b82e08b118029fad105f67d844 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149797 Malicious code in yaml-nightmare-command-start (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 22757024aa3a3d10664748a50311b9182e726fc4abcde0b54f43b750cb3c57c2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-120129

Malicious code in yaml-prettier-css-minimizer-webpack-plugin-cosmiconfig npm...

Malicious code in yaml-gatsby-yildun-less (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9176cc856a7e1b77aae4968733ab2bea8d8ddf71d2233a9e6f1ef1c0f9e0646f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-116520

Malicious code in ariel-cluster-yaml-vega npm...

EUVD-2025-116476

Malicious code in async-hugo-yaml-rimraf npm...

Malicious code in spectron-bootstrap-yaml-iota (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f3f56029d7ba08a16d0e0186ed582f9e0eee3faf4dd11a94341de93ca17195cb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146282 Malicious code in playwright-library-build-yaml (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector accd70c1139e0458aefe8218d3b4dbe2ab9d2ed5d6838ed332328f9a10b2e2f8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141304 Malicious code in css-loader-gridsome-postcss-loader-yaml (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b76708fe5d0a2195e1d55421d5eb35a7bfcffe8ce7ea160c4bdd464e0fe4702b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...