EUVD-2025-178880

Malicious code in float-rain-finally-yaml-air npm...

EUVD-2025-176581

Malicious code in run-script-yaml-fomalhaut-eslint-config npm...

Malicious code in wind-quick-char-yaml-thread (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ddce2ad9ae1e5a7ff23e318e9d892e2368904076cd87af82d0c6e57a8ee5fd2d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-180349

Malicious code in archaeometry-yaml-phoebe-ophiuchus npm...

MAL-2025-189214 Malicious code in rest-oortcloud-interstellarmedium-yaml (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f490d6f037ba5aba42fdaf960b0d8bbe6e55f94782153789b5b8d489e6eca4cc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187755 Malicious code in less-loader-gulp-yaml-crust (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a37ba6b2766ddc09a8955e32126156706d18cd48cf81fa1da83c4c563b856dfc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-178902

Malicious code in final-scale-static-yaml-debug npm...

EUVD-2025-178127

Malicious code in less-loader-gulp-yaml-crust npm...

EUVD-2025-175455

Malicious code in yaml-barnard-jekyll-magnetar npm...

EUVD-2025-177739

Malicious code in mui-reveal-md-registry-yaml npm...

EUVD-2025-175451

Malicious code in yaml-halley-astrobiology-mutation npm...

EUVD-2025-176062

Malicious code in tardigrade-virgo-hologram-yaml npm...

EUVD-2025-178857

Malicious code in fork-winston-apollo-yaml npm...

EUVD-2025-176661

Malicious code in rest-oortcloud-interstellarmedium-yaml npm...

EUVD-2025-176482

Malicious code in scripts-yaml-janus-gacrux npm...

MAL-2025-190013 Malicious code in try-stub-yaml-query-awk (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 64d7afc6d4f0fe68228645490da6a101c05503ade1edbaa923ccc4560f7632b2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-175448

Malicious code in yaml-notify-authorize-code-web npm...

EUVD-2025-177972

Malicious code in magnetar-paleoecology-tectonic-yaml npm...

EUVD-2025-179637

Malicious code in commitlint-betelgeuse-yaml-indus npm...

MAL-2025-186091 Malicious code in chakra-ui-sadr-yaml-less-loader (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3a073ff2d6f60d319212474b26295e2faeab06927317a907039f5600ac134ae0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...