MAL-2025-144197 Malicious code in koa-neptune-slidev-tool (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3ca591866a0d3e7083a8e6c41f35814d002fc420eefffdc1e60ff6f99becf00b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144205 Malicious code in koa-request-backend-cors (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 08921411e6ecc93fa3ef8d34a42907e38e7b700460a3ee414b6b545798b2915c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148051 Malicious code in socketio-eslint-koa-typeorm (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bc3f0f58d2f73595ffcb105ce5fb3977d91e5a5c7bca9d99dd92da82d2923b8e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-122321

Malicious code in sagitta-koa-io-axios npm...

EUVD-2025-116054

Malicious code in blitz-koa-umbra-fork npm...

EUVD-2025-113581

Malicious code in flare-koa-version-aether npm...

EUVD-2025-111914

Malicious code in koa-pipe-dorado-adonis npm...

Malicious code in sails-aquarius-elektra-koa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 98a55c0fac4c3569449fdc116417d05fb97f310e65f036c7e35510fb8e9d4bfd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in centaurus-vuepress-concurrently-koa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ac3d17c254d20bfae82b30318943e94b6c475fe6eaa7f65fc00ca1b3cb773d39 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-111924

Malicious code in koa-dependencies-jabbah-telesto npm...

Malicious code in solis-sequelize-koa-cygnus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a29e3e8c5a3977cec9560fe30b6c2fd0263b5738ea521484c63f631986c17a31 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in express-markdownlint-koa-deneb (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1d5af99872602a5f7cbd6edad3d03e0270313304601d1cdf9cb87cd3089c9e7c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-122670

Malicious code in remark-mensa-publish-koa npm...

EUVD-2025-111906

Malicious code in koa-soap-loglevel-hyperion npm...

EUVD-2025-111907

Malicious code in koa-schema-hyperion-indus npm...

EUVD-2025-112293

Malicious code in janus-mysql-koa-unuk npm...

EUVD-2025-111138

Malicious code in mini-css-extract-plugin-koa-chromedriver-playwright npm...

EUVD-2025-120302

Malicious code in xanthus-koa-cross-env-webdriver-mocha npm...

EUVD-2025-113349

Malicious code in gacrux-dagda-koa-css-loader npm...

Malicious code in chai-firebase-koa-wezen (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 58c3684afb31f84cfdeb0ce06a2cd60169e7022b8dada7fd26542b56b9544dad This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...