EUVD-2025-114675

Malicious code in cz-conventional-changelog-subscription-loopback-titan npm...

EUVD-2025-111565

Malicious code in loopback-frontend-prettier-plugin-markdown-spectron npm...

EUVD-2025-111572

Malicious code in loopback-bunyan-kinetic-neptune npm...

EUVD-2025-122772

Malicious code in regulus-loopback-gravity-postgres npm...

Malicious code in loopback-framework-loopback-janus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9a7b27e27c7246783d05331bd95e459820ecd9975b3cb5f76e1d50febbf6d07d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-113582

Malicious code in flare-hugo-build-loopback npm...

EUVD-2025-120790

Malicious code in version-loopback-ursa-charon npm...

EUVD-2025-116530

Malicious code in arcturus-loopback-typeorm-vortex npm...

EUVD-2025-115339

Malicious code in chromedriver-elektra-halley-loopback npm...

EUVD-2025-122858

Malicious code in react-bootstrap-loopback-acamar-csrf npm...

EUVD-2025-113479

Malicious code in fornax-loopback-npm-wolf npm...

EUVD-2025-111552

Malicious code in loopback-sequelize-concurrently-server npm...

MAL-2025-144547 Malicious code in loopback-firebase-postgres-luna (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2789696425e4ec276c93faea29470a11265e41a4117bcdbc14f88a208240a63e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144543 Malicious code in loopback-bunyan-kinetic-neptune (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 464f9e02bf0e4f155da9c40199dbec9f723eab41656775a94271c27291e7effd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144565 Malicious code in loopback-socketio-restart-resolvers (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6fc135c39dd60c0e9542761abc5a6c9b077de7f18dccf0e15264129c66ebd396 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144683 Malicious code in markdown-loopback-ursa-zenith (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 57f1714b1cf67d20164beb37d9861a8cb15671e68dc261c9e0b7405341022519 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144555 Malicious code in loopback-kastra-soap-bulma (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0e6751700dd5dafa2b7cc3b3121f35df9e182b23f1034caf2ebb6aedeb0f047c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143951 Malicious code in jovian-loopback-terser-webpack-plugin-protractor (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b260282c7f1867e1238bd604cf0bbcfd10833a0a3d62ed9c36ba1dcae09ca209 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141237 Malicious code in cressida-loopback-chromedriver-chariklo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d1a0af00cb0b9785b12adba41fa57c163bee087f98cf867dd44117cf472565a2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-122408

Malicious code in rollup-plugin-europa-loopback-dorado npm...