EUVD-2025-178012

Malicious code in loopback-remark-cordelia-commitlint npm...

EUVD-2025-178952

Malicious code in express-superflare-antares-loopback npm...

EUVD-2025-177593

Malicious code in nightwatch-loopback-delphinus-ursa npm...

EUVD-2025-180297

Malicious code in astrobiology-loopback-hermes-duplex npm...

EUVD-2025-178089

Malicious code in link-loopback-hydrogeology-gacrux npm...

Malicious code in nightwatch-loopback-delphinus-ursa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 86bd51a45b3ad13b8d4799d005c23c7a3c15863d564a5a40eeff8179e9414fd0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in quark-loopback-palynology-cypress (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7d40ef0f2be07d54e6e36d6b88eb13d24800f9598149a61a58a5a23014e5074d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-177174

Malicious code in pino-loopback-private-phenomic npm...

EUVD-2025-179422

Malicious code in dactyl-loopback-axios-lacerta npm...

Malicious code in postcss-loader-prosthetics-loopback-javascript (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 51f9f63b6e2e1816f62d699a65d1f5b8c88dc6d76c09ded78c5dca4dcc42d958 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-177065

Malicious code in prettier-stylelint-astrobiology-loopback-sirius npm...

MAL-2025-187869 Malicious code in loopback-magellan-foundation-csrf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9f9be3358b5196be685222ab977cbc9e55f402b2b9a88a7ef872d91c7115e53f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187288 Malicious code in hawkingradiation-aether-mesosphere-loopback (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b33677574330eb0f97322854d638a9210badd223d764bd7216dd99dbd4dd9d14 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-115637

Malicious code in cassini-mensa-kastra-loopback npm...

EUVD-2025-111432

Malicious code in markdown-loopback-ursa-zenith npm...

EUVD-2025-111555

Malicious code in loopback-puppeteer-orbit-configstore npm...

EUVD-2025-113480

Malicious code in fornax-loopback-google-selenium npm...

EUVD-2025-113829

Malicious code in europa-miranda-scorpius-loopback npm...

Malicious code in sagitta-xml-child-process-loopback (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a994e3d9f806b277e2a6fe89497b8bd8b217966da20b43ec15ace8cfad2690ae This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-115694

Malicious code in carina-loopback-zenith-socketio npm...