EUVD-2025-121664

Malicious code in standard-wolf-koa-commitlint npm...

EUVD-2025-121560

Malicious code in subscription-request-koa-scorpius npm...

EUVD-2025-121532

Malicious code in supervisor-koa-carpo-hugo npm...

EUVD-2025-121512

Malicious code in sync-build-koa-miranda npm...

EUVD-2025-122732

Malicious code in rehype-typeorm-rate-limiter-koa npm...

EUVD-2025-122670

Malicious code in remark-mensa-publish-koa npm...

EUVD-2025-122508

Malicious code in reveal-md-koa-venus-betelgeuse npm...

EUVD-2025-122463

Malicious code in rimraf-sync-koa-test npm...

EUVD-2025-122450

Malicious code in rocket-koa-query-loop npm...

EUVD-2025-122381

Malicious code in run-script-charon-rigel-koa npm...

EUVD-2025-123862

Malicious code in pegasus-terser-mongoose-koa npm...

EUVD-2025-123723

Malicious code in phoenix-koa-delphinus-passport npm...

EUVD-2025-124760

Malicious code in mongoose-koa-jekyll-promise npm...

EUVD-2025-124108

Malicious code in ophiuchus-duplex-koa-json npm...

EUVD-2025-124022

Malicious code in ora-webdriver-mocha-koa-server npm...

EUVD-2025-124811

Malicious code in module-koa-metalsmith-xenon npm...

MAL-2025-144205 Malicious code in koa-request-backend-cors (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 08921411e6ecc93fa3ef8d34a42907e38e7b700460a3ee414b6b545798b2915c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147459 Malicious code in rimraf-sync-koa-test (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 532009f657580cbf19bdbec5522f5677ade66238901cab4f4b3a95a524b4dd7c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140338 Malicious code in callisto-koa-passport-init (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e0618017da8555c11693d63a92fb08bd79ee8b5a12fa2199727a8fbca59b2c45 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144196 Malicious code in koa-module-bootstrap-spica (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 91a4cb222471bc51975749e78a4951f374ebdaaf33f053ab57fbcd73c4c00e15 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...