EUVD-2025-111318

Malicious code in meissa-chakra-ui-cz-conventional-changelog-loopback npm...

EUVD-2025-124203

Malicious code in nuxtjs-uglify-js-loopback-comet npm...

MAL-2025-144547 Malicious code in loopback-firebase-postgres-luna (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2789696425e4ec276c93faea29470a11265e41a4117bcdbc14f88a208240a63e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-120322

Malicious code in xanadu-run-script-ceres-loopback npm...

Malicious code in sagitta-xml-child-process-loopback (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a994e3d9f806b277e2a6fe89497b8bd8b217966da20b43ec15ace8cfad2690ae This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-124105

Malicious code in ophiuchus-got-perseus-loopback npm...

Malicious code in pino-loopback-uninstall-eslint-plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 74e158529ae4b1d9cd15ea986ffb47caae4298f787e4f49028d11d8a46692983 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-115872

Malicious code in bulma-uninstall-loopback-sass-loader npm...

MAL-2025-144557 Malicious code in loopback-mensa-chai-mongoose (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 01362edbbd4889b7fcd0958ff4df6d0c1e3cac1f61f9e9a762c6f9b254f4c359 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-112473

Malicious code in inquirer-chalk-commitlint-config-angular-loopback npm...

EUVD-2025-111551

Malicious code in loopback-server-grunt-terser-webpack-plugin npm...

EUVD-2025-114675

Malicious code in cz-conventional-changelog-subscription-loopback-titan npm...

EUVD-2025-120137

Malicious code in yaml-loopback-cors-postcss npm...

EUVD-2025-113479

Malicious code in fornax-loopback-npm-wolf npm...

MAL-2025-144549 Malicious code in loopback-framework-loopback-janus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9a7b27e27c7246783d05331bd95e459820ecd9975b3cb5f76e1d50febbf6d07d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144559 Malicious code in loopback-neptune-draco-concurrently (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 863bf80300eab0764f6d6d3b01b0dce677accede3ce2225fb1ebda3b3224b812 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141540 Malicious code in deneb-convict-loopback-spica (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 71b47cb552bd2273944966f97cbddfb7938062c25b736c668a27c6a067a040ef This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144564 Malicious code in loopback-server-grunt-terser-webpack-plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0f767bb3ff31fa9ecd5cbd84e586ecf684b960f25ac9654339d7fad97c02d920 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-123166

Malicious code in public-cors-blitz-loopback npm...

MAL-2025-140977 Malicious code in commitlint-dependencies-loopback-proxima (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0aef012a555af886c0bacf11d142271509bea1aa08ebcf5f1b0cc1c4e895b26d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...