EUVD-2025-114651

Malicious code in dactyl-webpack-loopback-winston npm...

EUVD-2025-121934

Malicious code in slides-non-blocking-dotenv-safe-loopback npm...

EUVD-2025-123402

Malicious code in prettier-stylelint-sync-install-loopback npm...

MAL-2025-144567 Malicious code in loopback-transport-telesto-gatsby (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fc1e6c82cc6b0662a9bca2eb368605c4bfeaf72e32266539fcb351198321e998 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143170 Malicious code in halley-sync-colors-loopback (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a315129aea4bbc0df37718edecba7ea88cb3534b2df5ef52e798db334c6e3d04 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-115868

Malicious code in bulma-xenon-loopback-rate-limiter npm...

MAL-2025-142632 Malicious code in fornax-loopback-google-selenium (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1453791ccec0e6d9af3bb03731b15537c00689db44a6584eef16befedb6d447c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144543 Malicious code in loopback-bunyan-kinetic-neptune (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 464f9e02bf0e4f155da9c40199dbec9f723eab41656775a94271c27291e7effd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144797 Malicious code in meissa-chakra-ui-cz-conventional-changelog-loopback (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f9f285c7d45797112ceab0a231619970762984e8ac052e668d9864ec4afeba50 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-113608

Malicious code in firebase-meissa-loopback-event npm...

Malicious code in jabbah-nuxtjs-spica-loopback (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 14c6404a455bb29d3f9893290050e6e8982e6a5dbc7c9429a4f25827345da287 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-123618

Malicious code in pm2-loopback-update-corvus npm...

EUVD-2025-121694

Malicious code in sqlite-loopback-iota-sqlite npm...

MAL-2025-141237 Malicious code in cressida-loopback-chromedriver-chariklo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d1a0af00cb0b9785b12adba41fa57c163bee087f98cf867dd44117cf472565a2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149711 Malicious code in xerxes-nodemon-test-loopback (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 191a6afdd1eee981950f29cad59759e49c40cd8ef34c6d81b52395578bd2f617 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in firebase-meissa-loopback-event (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 88272abc19fe27fd8fe14abf6c2687fd476bd7824effb94ab1db41c7704d3038 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142503 Malicious code in firebase-meissa-loopback-event (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 88272abc19fe27fd8fe14abf6c2687fd476bd7824effb94ab1db41c7704d3038 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141158 Malicious code in corvus-loopback-yildun-standard (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c6529875bab3e3c2ea80662f8dd0237daf2d1c13aca1fa24ecbfe0e6a13e213d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144544 Malicious code in loopback-changelog-nova-deimos (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d596d73c5cbb63934b0f5f3cd16fab87c035753ffb74a90e8db72291c51a7c22 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145513 Malicious code in node-config-kronos-miranda-loopback (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0ae16a3a44c1202bba281e9ce9367fef3c378fc7b5a59c16eb3b020c2ee73510 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...