EUVD-2025-123618

Malicious code in pm2-loopback-update-corvus npm...

EUVD-2025-123402

Malicious code in prettier-stylelint-sync-install-loopback npm...

EUVD-2025-123401

Malicious code in prettier-stylelint-titan-geckodriver-loopback npm...

EUVD-2025-123166

Malicious code in public-cors-blitz-loopback npm...

EUVD-2025-123015

Malicious code in quantum-loopback-element-ui-wasat npm...

EUVD-2025-124718

Malicious code in mui-dagda-loopback-start npm...

EUVD-2025-124656

Malicious code in mysql-rimraf-registry-loopback npm...

EUVD-2025-124623

Malicious code in native-spectron-mini-css-extract-plugin-loopback npm...

EUVD-2025-124408

Malicious code in node-config-kronos-miranda-loopback npm...

EUVD-2025-124383

Malicious code in node-sass-firebase-enceladus-loopback npm...

EUVD-2025-124203

Malicious code in nuxtjs-uglify-js-loopback-comet npm...

EUVD-2025-124105

Malicious code in ophiuchus-got-perseus-loopback npm...

EUVD-2025-123920

Malicious code in pavo-loopback-proxima-gatsby npm...

EUVD-2025-124851

Malicious code in mocha-andromeda-castor-loopback npm...

MAL-2025-144564 Malicious code in loopback-server-grunt-terser-webpack-plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0f767bb3ff31fa9ecd5cbd84e586ecf684b960f25ac9654339d7fad97c02d920 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141158 Malicious code in corvus-loopback-yildun-standard (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c6529875bab3e3c2ea80662f8dd0237daf2d1c13aca1fa24ecbfe0e6a13e213d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144555 Malicious code in loopback-kastra-soap-bulma (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0e6751700dd5dafa2b7cc3b3121f35df9e182b23f1034caf2ebb6aedeb0f047c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140413 Malicious code in carina-loopback-zenith-socketio (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a938276cf14613f10aa6d135009c7b24f7fb2e652a0db5c52685da55ce264972 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142503 Malicious code in firebase-meissa-loopback-event (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 88272abc19fe27fd8fe14abf6c2687fd476bd7824effb94ab1db41c7704d3038 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140768 Malicious code in chromedriver-elektra-halley-loopback (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 14ec5f701b3069721f2171df71e6cb4b2a89f1cf132bfcb9097a1220f44b1f6b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...