MAL-2025-140574 Malicious code in ceres-react-bootstrap-gatsby-standard (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bf3b4e726dde90fa56bb930d14a2e37b38d2948bf534b5ec6b166ca2e2d78a12 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140122 Malicious code in bootstrap-standard-yonder-miranda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 062ac6199e03c58154dfd853a5ca4b290af0a81c5f809ac9ac34e7cacfdfed49 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-122966

Malicious code in quasar-neptune-bootstrap-altair npm...

EUVD-2025-124664

Malicious code in mysql-meissa-react-bootstrap-dagda npm...

EUVD-2025-111215

Malicious code in meteor-bootstrap-impulse-flare npm...

Malicious code in auth-middleware-phoebe-bootstrap (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5e3e51978571ca4dfff349d756ffbe01b1a5025c948ec27206dac4551be7b695 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in react-bootstrap-jasmine-restart-jupiter (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a1a0d9a9042d8fd233d6e74a451ea09d2b6c63f1d29c3db92cb84b1dfc400325 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142531 Malicious code in flare-markdown-nuxtjs-bootstrap (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bad6874c7e2400099e1265a13d17d1878923c6efc8c4f2ab254726f668d03798 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147050 Malicious code in react-bootstrap-achernar-procyon-mini-css-extract-plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 47c1b7077ae1d503d6fa1608613dae97013280d40f52920ea01fd87b77227ec8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-115984

Malicious code in bootstrap-rate-limiter-prettier-stylelint-transport npm...

MAL-2025-147065 Malicious code in react-bootstrap-lynx-neptune-docusaurus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 510019b85afb9e4e1728b2f031dcc773b97174840ffcdc884eab7dc011eb029f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in firebase-bootstrap-xenon-mira (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d0d3d1a15b135e8c44460a7dd13e05812078c6c8c9f084b23bc476a527c63226 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-111573

Malicious code in loopback-bootstrap-yonder-iota npm...

EUVD-2025-111341

Malicious code in mdx-react-bootstrap-javascript-impulse npm...

EUVD-2025-111340

Malicious code in mdx-react-bootstrap-react-bootstrap-meissa npm...

EUVD-2025-112561

Malicious code in impulse-react-bootstrap-gacrux-stream npm...

EUVD-2025-112502

Malicious code in ini-wasat-react-bootstrap-javascript npm...

EUVD-2025-111917

Malicious code in koa-module-bootstrap-spica npm...

Malicious code in bootstrap-comet-convict-inquirer (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1090d16dc37057a5852adbfd5f493146d23a9dde058a92e0f5e68cf23ffbe844 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in bootstrap-rollup-figures-auriga (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dc950508599104478cefa863ecb90a39d15f9b7095bafe4d9c802576eb00031f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...