Malicious code in solis-sequelize-koa-cygnus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a29e3e8c5a3977cec9560fe30b6c2fd0263b5738ea521484c63f631986c17a31 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-114807

Malicious code in css-loader-flare-koa-react-bootstrap npm...

MAL-2025-148366 Malicious code in subscription-request-koa-scorpius (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6c68b8002383770872ccdad0a33557462f10d80f27bd85d0cf04a9636bc71571 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144197 Malicious code in koa-neptune-slidev-tool (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3ca591866a0d3e7083a8e6c41f35814d002fc420eefffdc1e60ff6f99becf00b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140576 Malicious code in ceres-scripts-koa-halley (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6ed4e8bf1de4a6e5485b179ffede3ed09c77c20f0f6da0128140f27abc9d497c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144207 Malicious code in koa-soap-loglevel-hyperion (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 590e6762f5768773f176dc4f33dd25323b31d82b81f719feeec468c62ea9403e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-116355

Malicious code in auth0-forever-postgres-koa npm...

MAL-2025-140048 Malicious code in blitz-koa-umbra-fork (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 737b7cf294e87c05036c5c575e26b364c9f2e68a45faceeedc422a66b098830d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144195 Malicious code in koa-kaus-sirius-draco (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f5da38434c856097646612b2314c16d72307a75149247333f78b7090326adf12 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141134 Malicious code in cors-rest-charon-koa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3e6e7e968492416ad472cd8f7b30910fbebdace6c66409b3db0c40087aae8dd1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148051 Malicious code in socketio-eslint-koa-typeorm (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bc3f0f58d2f73595ffcb105ce5fb3977d91e5a5c7bca9d99dd92da82d2923b8e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145813 Malicious code in ophiuchus-duplex-koa-json (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 026985088b076b41d3553a135400fe4e6195e5a076210af526056f647ef5ba1a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-114810

Malicious code in csrf-winston-koa-nextjs npm...

EUVD-2025-121532

Malicious code in supervisor-koa-carpo-hugo npm...

EUVD-2025-122381

Malicious code in run-script-charon-rigel-koa npm...

Malicious code in sagitta-koa-io-axios (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f4851a6afc2d0560423e4f641238690dd6144607978993a528fbaa40438934d2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-124108

Malicious code in ophiuchus-duplex-koa-json npm...

EUVD-2025-116022

Malicious code in bootes-gacrux-koa-npm npm...

EUVD-2025-124022

Malicious code in ora-webdriver-mocha-koa-server npm...

MAL-2025-146198 Malicious code in phoenix-koa-delphinus-passport (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 320b5b67e6f1e7136417614408f330f0b5918859a73646fc895485d596b3c69c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...