EUVD-2025-111545

Malicious code in loopback-weywot-style-loader-gemini npm...

EUVD-2025-111432

Malicious code in markdown-loopback-ursa-zenith npm...

EUVD-2025-111318

Malicious code in meissa-chakra-ui-cz-conventional-changelog-loopback npm...

EUVD-2025-111301

Malicious code in meissa-loopback-dactyl-avior npm...

EUVD-2025-112576

Malicious code in impulse-chalk-browserify-loopback npm...

EUVD-2025-112486

Malicious code in init-nestjs-loopback-pino npm...

EUVD-2025-112473

Malicious code in inquirer-chalk-commitlint-config-angular-loopback npm...

EUVD-2025-112400

Malicious code in iota-canopus-loopback-eleventy npm...

EUVD-2025-112328

Malicious code in jabbah-nuxtjs-spica-loopback npm...

EUVD-2025-112186

Malicious code in jest-markdown-loopback-superagent npm...

EUVD-2025-112162

Malicious code in jovian-loopback-terser-webpack-plugin-protractor npm...

EUVD-2025-112083

Malicious code in juno-loopback-tailwindcss-blitz npm...

EUVD-2025-112000

Malicious code in karma-lacerta-loopback-karma npm...

Malicious code in betelgeuse-xanadu-deimos-loopback (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f7f44508c82652976c4e53f82e197081f45973be86a711dab05db353c389cbfb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in carina-loopback-zenith-socketio (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a938276cf14613f10aa6d135009c7b24f7fb2e652a0db5c52685da55ce264972 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ceres-loopback-sequelize-browserify (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d41931976c004d89c852a678bc51be3e40ffa196f8850fa53ff966d073391c22 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in commitlint-dependencies-loopback-proxima (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0aef012a555af886c0bacf11d142271509bea1aa08ebcf5f1b0cc1c4e895b26d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in firebase-meissa-loopback-event (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 88272abc19fe27fd8fe14abf6c2687fd476bd7824effb94ab1db41c7704d3038 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fornax-loopback-npm-wolf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9b975a5ba0f0c6a4838576be74c94b28470bbf753a132f2a366c7773f2f67dc2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in gacrux-galaxy-loopback-elara (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5fe9574eada5f7856d57a924bdfe32e8ebcfe2ef5419865a35394d25b67e09fc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...