EUVD-2025-124760

Malicious code in mongoose-koa-jekyll-promise npm...

EUVD-2025-114810

Malicious code in csrf-winston-koa-nextjs npm...

EUVD-2025-111921

Malicious code in koa-electron-reveal-md-pavo npm...

EUVD-2025-113167

Malicious code in global-nuxtjs-antares-koa npm...

EUVD-2025-115531

Malicious code in ceres-scripts-koa-halley npm...

Malicious code in koa-neptune-slidev-tool (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3ca591866a0d3e7083a8e6c41f35814d002fc420eefffdc1e60ff6f99becf00b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-120426

Malicious code in winston-koa-wasat-celeste npm...

EUVD-2025-114246

Malicious code in elara-barnard-koa-fusion npm...

EUVD-2025-111887

Malicious code in kronos-sirius-process-koa npm...

EUVD-2025-121664

Malicious code in standard-wolf-koa-commitlint npm...

Malicious code in koa-odin-aquarius-cli (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5224286352a2ba1a1be9265f826fd979201b470b0eadf7543fa1921604f6f120 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-121234

Malicious code in titan-tailwindcss-koa-transport npm...

Malicious code in gacrux-dagda-koa-css-loader (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b2b5ee59e11ee829934c641c5b26806bcec0bca1048843e128d64e3bfd3ef67a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-113728

Malicious code in express-markdownlint-koa-deneb npm...

MAL-2025-147601 Malicious code in sagitta-koa-io-axios (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f4851a6afc2d0560423e4f641238690dd6144607978993a528fbaa40438934d2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-115518

Malicious code in chai-firebase-koa-wezen npm...

MAL-2025-143820 Malicious code in janus-mysql-koa-unuk (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0ea8a1aaeac6c1573aba5d83e8b0d8aabac6f7118b4d1347f2ede074d5347984 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-116054

Malicious code in blitz-koa-umbra-fork npm...

MAL-2025-144192 Malicious code in koa-electron-reveal-md-pavo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4a1bc2848e7e40366ae4424bcf5d0323c1a8284f8c81db4e7d58b36a05f3f2ca This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144721 Malicious code in markdownlint-antares-google-koa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 204408f6254a7b497b0c72adb8496ab013f648f046eb3bf4427efeeaae9de8e4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...