EUVD-2025-114569

Malicious code in deneb-convict-loopback-spica npm...

EUVD-2025-121934

Malicious code in slides-non-blocking-dotenv-safe-loopback npm...

EUVD-2025-123699

Malicious code in pino-loopback-uninstall-eslint-plugin npm...

MAL-2025-144797 Malicious code in meissa-chakra-ui-cz-conventional-changelog-loopback (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f9f285c7d45797112ceab0a231619970762984e8ac052e668d9864ec4afeba50 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-111553

Malicious code in loopback-sedna-vulcan-hexo npm...

Malicious code in betelgeuse-xanadu-deimos-loopback (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f7f44508c82652976c4e53f82e197081f45973be86a711dab05db353c389cbfb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-114651

Malicious code in dactyl-webpack-loopback-winston npm...

EUVD-2025-123920

Malicious code in pavo-loopback-proxima-gatsby npm...

EUVD-2025-111554

Malicious code in loopback-readable-meissa-miranda npm...

Malicious code in loopback-umbra-atlas-perseus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 61f3b937c72af451c9f2a4ec4a819e372d3738b46911b7e547956f052714b532 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in impulse-chalk-browserify-loopback (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6b4135ccaa60e37d9c574a7f14ef998a716328721b7261309164bfd5c329e6f5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-123015

Malicious code in quantum-loopback-element-ui-wasat npm...

Malicious code in loopback-firebase-postgres-luna (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2789696425e4ec276c93faea29470a11265e41a4117bcdbc14f88a208240a63e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-112942

Malicious code in halley-sync-colors-loopback npm...

EUVD-2025-112083

Malicious code in juno-loopback-tailwindcss-blitz npm...

EUVD-2025-124203

Malicious code in nuxtjs-uglify-js-loopback-comet npm...

EUVD-2025-112473

Malicious code in inquirer-chalk-commitlint-config-angular-loopback npm...

EUVD-2025-120137

Malicious code in yaml-loopback-cors-postcss npm...

EUVD-2025-123618

Malicious code in pm2-loopback-update-corvus npm...

EUVD-2025-115537

Malicious code in ceres-loopback-sequelize-browserify npm...