EUVD-2025-115995

Malicious code in bootstrap-hugo-altair-rehype npm...

EUVD-2025-116002

Malicious code in bootstrap-comet-convict-inquirer npm...

EUVD-2025-122279

Malicious code in sails-delphinus-build-react-bootstrap npm...

EUVD-2025-122628

Malicious code in request-halley-chakra-ui-bootstrap npm...

EUVD-2025-122791

Malicious code in registry-kronos-bootstrap-hyperion npm...

EUVD-2025-124697

Malicious code in mutation-fork-module-bootstrap npm...

EUVD-2025-122280

Malicious code in sails-cygnus-aquarius-react-bootstrap npm...

Malicious code in react-bootstrap-hyperion-gemini-eris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9c1223a8fe17c4091ebca85d8c9ec163e07248fb1c3978935ed1eed44557b75d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-122255

Malicious code in sass-loader-foundation-jsonp-react-bootstrap npm...

MAL-2025-145971 Malicious code in parcel-sedna-react-bootstrap-nodejs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ae09af36af178a81acf4d4e93bc643df245329f487f8538f7c695e995af2c730 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149589 Malicious code in xanadu-callback-request-bootstrap (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 26cf5680828ccf264b0c7c676df6028edd1e2c4f2e5ca2153794fe92a09f8f4e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140120 Malicious code in bootstrap-shelljs-enif-cassini (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f5d6bce3ea521ea3b8fa5d1f0d8d3c503d7a97fd2f7dc25e2a87d579491600c4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142070 Malicious code in envconfig-bootstrap-uglify-js-colors (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0bfd4098356c8ae408716b081b72671e5e811c3ef40bc851d469ae14849c5741 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147054 Malicious code in react-bootstrap-docusaurus-release-it-wasat (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0995fe21961efede9dd77ca581d5867b77e1a82321014f9343117b49c54685e3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-115992

Malicious code in bootstrap-janus-spica-docusaurus npm...

MAL-2025-140574 Malicious code in ceres-react-bootstrap-gatsby-standard (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bf3b4e726dde90fa56bb930d14a2e37b38d2948bf534b5ec6b166ca2e2d78a12 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147063 Malicious code in react-bootstrap-lint-alphard-ursa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3684fd38755e805195dd3647625892859bfef3ea8e3c810285fb6382548a89c9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140541 Malicious code in centaurus-bootstrap-callback-webpack (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d7969750400aaf0b8947f7695420d28f460891a0d6b84261f1405f84b7010400 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140110 Malicious code in bootstrap-janus-spica-docusaurus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5bb8df0cbaee112cc2fa35b1b834732111d81069400cdaf6f347189357c40e90 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144196 Malicious code in koa-module-bootstrap-spica (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 91a4cb222471bc51975749e78a4951f374ebdaaf33f053ab57fbcd73c4c00e15 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...