EUVD-2025-175405

Malicious code in zephyr-sadr-child-process-bootes npm...

EUVD-2025-120449

Malicious code in winston-bootes-package-postgres npm...

Malicious code in winston-bootes-package-postgres (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8d3336ff67090dc4e941107022c3b2fe2463843101ef8cf3a59afd5e4401b546 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in meissa-cordelia-ursa-bootes (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 131c53abda90b59bac2d95c26135113d7fdc21f8cd455eef5df21ac017aa8f5b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142780 Malicious code in gacrux-publish-tailwindcss-bootes (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 85d37f5a3c4214caccf7c82701f651d7efb773236d74e1fff5946573dbc65889 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...