MAL-2025-140123 Malicious code in bootstrap-terser-webpack-plugin-winston-link (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b4c70c900ce100fa38a9006c7544ae598fcfe7ee0b5907a4a48e068f95db4936 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-113448

Malicious code in foundation-adonis-duplex-bootstrap npm...

EUVD-2025-122966

Malicious code in quasar-neptune-bootstrap-altair npm...

MAL-2025-142060 Malicious code in enif-react-bootstrap-gravity-apollo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7366c6b2b849d14ce39d70c33c2606bc5ee97e6c0656befc2c46757026a36cf5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146314 Malicious code in pm2-sync-convict-react-bootstrap (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1330108cc41fc5f8b16b97bd8b44613ea9687f6d108f9fb4aac46e264b7302b5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141991 Malicious code in eleventy-bootstrap-middleware-sails (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c2974c16cd773cd26b237ff38d91f6da9c867db0c7fe37f118599e7495cde9f8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140574 Malicious code in ceres-react-bootstrap-gatsby-standard (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bf3b4e726dde90fa56bb930d14a2e37b38d2948bf534b5ec6b166ca2e2d78a12 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145971 Malicious code in parcel-sedna-react-bootstrap-nodejs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ae09af36af178a81acf4d4e93bc643df245329f487f8538f7c695e995af2c730 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140120 Malicious code in bootstrap-shelljs-enif-cassini (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f5d6bce3ea521ea3b8fa5d1f0d8d3c503d7a97fd2f7dc25e2a87d579491600c4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-122205

Malicious code in scorpius-thuban-algol-bootstrap npm...

MAL-2025-148109 Malicious code in spectron-bootstrap-yaml-iota (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f3f56029d7ba08a16d0e0186ed582f9e0eee3faf4dd11a94341de93ca17195cb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147063 Malicious code in react-bootstrap-lint-alphard-ursa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3684fd38755e805195dd3647625892859bfef3ea8e3c810285fb6382548a89c9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147536 Malicious code in rollup-taurus-antd-bootstrap (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7fc7f09a8172a6f84dff3f36916e21a8732e1de7d29a1a4fa802a450bcc89c74 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143029 Malicious code in gravity-react-bootstrap-commitlint-dynamo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cb22033e71a11b9b4e5ea920eae840ead86fee21e944aa895a89667612aee75e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144420 Malicious code in link-pino-pretty-react-bootstrap-cordelia (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 386846b5eb8ea17261166715d1b01f258c84fe3bd709898c4c45ac12b4038d21 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-120845

Malicious code in vega-bootstrap-barnard-hermes npm...

MAL-2025-140541 Malicious code in centaurus-bootstrap-callback-webpack (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d7969750400aaf0b8947f7695420d28f460891a0d6b84261f1405f84b7010400 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147050 Malicious code in react-bootstrap-achernar-procyon-mini-css-extract-plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 47c1b7077ae1d503d6fa1608613dae97013280d40f52920ea01fd87b77227ec8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147065 Malicious code in react-bootstrap-lynx-neptune-docusaurus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 510019b85afb9e4e1728b2f031dcc773b97174840ffcdc884eab7dc011eb029f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144196 Malicious code in koa-module-bootstrap-spica (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 91a4cb222471bc51975749e78a4951f374ebdaaf33f053ab57fbcd73c4c00e15 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...