EUVD-2025-122205

Malicious code in scorpius-thuban-algol-bootstrap npm...

MAL-2025-147071 Malicious code in react-bootstrap-polaris-prompts-duplex (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 70ab5c4a923aa2e466ecbc96e0eac3c8a5009b0e4895c85f60cfa56187d7f5e0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140123 Malicious code in bootstrap-terser-webpack-plugin-winston-link (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b4c70c900ce100fa38a9006c7544ae598fcfe7ee0b5907a4a48e068f95db4936 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148933 Malicious code in umbra-react-bootstrap-meissa-regulus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bf93686ac0c5d7e54ffaed0b8ea0486e846b54a3e4cf06bca794c4275d878695 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145971 Malicious code in parcel-sedna-react-bootstrap-nodejs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ae09af36af178a81acf4d4e93bc643df245329f487f8538f7c695e995af2c730 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140125 Malicious code in bootstrap-wezen-selenium-configstore (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ba700325c0ec38a68b85c35f22e10add36f7773904e951906f066fd96e60c3e3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-112715

Malicious code in hugo-react-bootstrap-nestjs-andromeda npm...

EUVD-2025-122356

Malicious code in sadr-loglevel-bootstrap-betelgeuse npm...

EUVD-2025-124664

Malicious code in mysql-meissa-react-bootstrap-dagda npm...

EUVD-2025-112350

Malicious code in izar-sails-eslint-plugin-bootstrap npm...

EUVD-2025-122858

Malicious code in react-bootstrap-loopback-acamar-csrf npm...

EUVD-2025-123887

Malicious code in pegasus-helios-bootstrap-meissa npm...

EUVD-2025-122861

Malicious code in react-bootstrap-hyperion-gemini-eris npm...

MAL-2025-147065 Malicious code in react-bootstrap-lynx-neptune-docusaurus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 510019b85afb9e4e1728b2f031dcc773b97174840ffcdc884eab7dc011eb029f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-122491

Malicious code in rigel-kronos-react-bootstrap-server npm...

EUVD-2025-120845

Malicious code in vega-bootstrap-barnard-hermes npm...

MAL-2025-148620 Malicious code in tethys-gulp-bootstrap-colors (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a91010575aafc5a357f617818a3e5202f494f84ef43eb7f26c7cab7739f7235e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-116834

Malicious code in aldebaran-bootstrap-mensa-graphql npm...

MAL-2025-144420 Malicious code in link-pino-pretty-react-bootstrap-cordelia (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 386846b5eb8ea17261166715d1b01f258c84fe3bd709898c4c45ac12b4038d21 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140541 Malicious code in centaurus-bootstrap-callback-webpack (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d7969750400aaf0b8947f7695420d28f460891a0d6b84261f1405f84b7010400 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...