EUVD-2025-111460

Malicious code in magellan-pavo-loopback-frontend npm...

Malicious code in loopback-install-cosmos-juno (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 27fe72bddd7ee5698a90b2681d3e1802889bb959c6cac112326eb20b2f1d6a02 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-115131

Malicious code in commitlint-dependencies-loopback-proxima npm...

EUVD-2025-123699

Malicious code in pino-loopback-uninstall-eslint-plugin npm...

MAL-2025-144683 Malicious code in markdown-loopback-ursa-zenith (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 57f1714b1cf67d20164beb37d9861a8cb15671e68dc261c9e0b7405341022519 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144655 Malicious code in magellan-pavo-loopback-frontend (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6c98a09c1d172ad9eb72a14167600f9052a467ab7ce122e23fba068359491f7c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mysql-rimraf-registry-loopback (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4ef71af5d791cc5bae890390ec31b9e882a22231a4ef3433e9d230f40bee5a43 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in loopback-neptune-draco-concurrently (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 863bf80300eab0764f6d6d3b01b0dce677accede3ce2225fb1ebda3b3224b812 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-112442

Malicious code in install-chakra-ui-loopback-antares npm...

EUVD-2025-111571

Malicious code in loopback-changelog-nova-deimos npm...

Malicious code in winston-ophiuchus-configstore-loopback (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector efca18a04a8da345e7fd1ab9586fdfb34f3f346cf16ea39fb312943602e6a7ec This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-120413

Malicious code in winston-ophiuchus-configstore-loopback npm...

EUVD-2025-124383

Malicious code in node-sass-firebase-enceladus-loopback npm...

Malicious code in loopback-changelog-nova-deimos (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d596d73c5cbb63934b0f5f3cd16fab87c035753ffb74a90e8db72291c51a7c22 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-112486

Malicious code in init-nestjs-loopback-pino npm...

EUVD-2025-120092

Malicious code in yonder-polaris-loopback-vuetify npm...

EUVD-2025-111572

Malicious code in loopback-bunyan-kinetic-neptune npm...

EUVD-2025-111563

Malicious code in loopback-global-levels-dorado npm...

EUVD-2025-121609

Malicious code in stream-galaxy-loopback-rocket npm...

Malicious code in corvus-loopback-yildun-standard (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c6529875bab3e3c2ea80662f8dd0237daf2d1c13aca1fa24ecbfe0e6a13e213d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...