Malicious code in bootstrap-kastra-event-scripts (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3a2df2510f2f174eab60a7a3916ad6759fd87b80db2bd5c6f9164cf9fcc0be69 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in bootstrap-fusion-loop-restart (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0ad929870f7e51b33e4727a05618a9c190591109bf47fc02313b51fdf7760115 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-176785

Malicious code in react-bootstrap-await-vortex-betelgeuse npm...

EUVD-2025-176783

Malicious code in react-bootstrap-phoenix-janus-module npm...

EUVD-2025-179994

Malicious code in bootstrap-forever-uranology-colors npm...

EUVD-2025-178189

Malicious code in kinetic-ora-bootstrap-redshift npm...

EUVD-2025-179653

Malicious code in command-bootstrap-exoplanetology-paleontology npm...

EUVD-2025-176502

Malicious code in schema-bunyan-magnetar-bootstrap npm...

EUVD-2025-179295

Malicious code in dione-kastra-public-react-bootstrap npm...

EUVD-2025-177387

Malicious code in package-uninstall-scorpius-react-bootstrap npm...

EUVD-2025-175832

Malicious code in umbriel-bootstrap-polaris-comet npm...

MAL-2025-185893 Malicious code in bootstrap-solis-bulma-zooarchaeology (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bd3c4b90b728e10c24b350f3bbaa8da21ea46f25f548e1c3a7dbb67672704c24 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-185887 Malicious code in bootstrap-cluster-fornax-link (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f68c8b328a4fdb50634ae09eb0a5a69120d6aedc072cba9562ccade41a2e33e6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-185892 Malicious code in bootstrap-semantic-release-pulsar-koa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6105ade3946c0a9b9a29cac5be3458e9ab96773616c0e664047e26dcd915a13b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

GHSA-GWQ6-FMVP-QP68 vulnerabilities

Vulnerabilities for packages: dotnet-bootstrap...

CVE-2025-55248 vulnerabilities

Vulnerabilities for packages: dotnet-bootstrap...

GHSA-GWQ6-FMVP-QP68 vulnerabilities

Vulnerabilities for packages: dotnet-bootstrap...

CVE-2025-55248 vulnerabilities

Vulnerabilities for packages: dotnet-bootstrap...

EUVD-2025-116431

Malicious code in auriga-algol-bootstrap-upgrade npm...

Malicious code in gravity-react-bootstrap-commitlint-dynamo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cb22033e71a11b9b4e5ea920eae840ead86fee21e944aa895a89667612aee75e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...