EUVD-2025-111924

Malicious code in koa-dependencies-jabbah-telesto npm...

EUVD-2025-111915

Malicious code in koa-odin-aquarius-cli npm...

Malicious code in koa-cassini-eclipse-lint-staged (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d1cd24fb361200188d4b0c5bd6616f98a3460bd0844e006c879e4840212da4a9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148051 Malicious code in socketio-eslint-koa-typeorm (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bc3f0f58d2f73595ffcb105ce5fb3977d91e5a5c7bca9d99dd92da82d2923b8e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147459 Malicious code in rimraf-sync-koa-test (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 532009f657580cbf19bdbec5522f5677ade66238901cab4f4b3a95a524b4dd7c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144192 Malicious code in koa-electron-reveal-md-pavo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4a1bc2848e7e40366ae4424bcf5d0323c1a8284f8c81db4e7d58b36a05f3f2ca This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143329 Malicious code in hermes-superagent-google-koa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 839f7222c322fbdf927457e0e47acfabbdf8739f68a3152c7bc8f9f55b0b19a3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140338 Malicious code in callisto-koa-passport-init (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e0618017da8555c11693d63a92fb08bd79ee8b5a12fa2199727a8fbca59b2c45 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147601 Malicious code in sagitta-koa-io-axios (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f4851a6afc2d0560423e4f641238690dd6144607978993a528fbaa40438934d2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147472 Malicious code in rocket-koa-query-loop (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 13e9a1af132a8126638baca3a85673704533f89020924385e0120402a4b1d9bc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144195 Malicious code in koa-kaus-sirius-draco (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f5da38434c856097646612b2314c16d72307a75149247333f78b7090326adf12 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147190 Malicious code in rehype-typeorm-rate-limiter-koa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2d96fef6502b7d80768f460d033cc48a5035c10338d164870a174486af09ced8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144204 Malicious code in koa-rate-limiter-terser-sedna (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1be96c07650b670c76bd394a0fd674f3357b792a7afc500f19b9fefa6e8625b5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-113349

Malicious code in gacrux-dagda-koa-css-loader npm...

EUVD-2025-120675

Malicious code in vulcan-sirius-thuban-koa npm...

Malicious code in koa-testcafe-koa-zephyr (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c6ba567e6bbedaaba4579cca62d69d9473426445d875a51b7d5ba3fb7b433575 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-113728

Malicious code in express-markdownlint-koa-deneb npm...

MAL-2025-144209 Malicious code in koa-testcafe-koa-zephyr (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c6ba567e6bbedaaba4579cca62d69d9473426445d875a51b7d5ba3fb7b433575 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140576 Malicious code in ceres-scripts-koa-halley (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6ed4e8bf1de4a6e5485b179ffede3ed09c77c20f0f6da0128140f27abc9d497c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144207 Malicious code in koa-soap-loglevel-hyperion (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 590e6762f5768773f176dc4f33dd25323b31d82b81f719feeec468c62ea9403e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...