EUVD-2025-111908

Malicious code in koa-request-backend-cors npm...

EUVD-2025-112326

Malicious code in jabbah-phoebe-parcel-koa npm...

EUVD-2025-111918

Malicious code in koa-kaus-sirius-draco npm...

EUVD-2025-116046

Malicious code in blitz-pm2-mutation-koa npm...

EUVD-2025-111913

Malicious code in koa-polaris-wasat-pegasus npm...

Malicious code in koa-test-cygnus-airbnb (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 96238a3c7357fcdab9b32f9f11f51f34fcc6b9e462ead5c3b0aaac62aae93638 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in koa-pyxis-xanadu-library (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 594a03c6489def7ddf1102a975db9f1cc23cc3c4b05bb3931ef7cd2c7b6eccd6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-111912

Malicious code in koa-postgres-blaze-electron npm...

EUVD-2025-124811

Malicious code in module-koa-metalsmith-xenon npm...

Malicious code in koa-polaris-wasat-pegasus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9308af0ff31c5ddc4d9944685391f62a5939f3e0541b0893d3901030490ff181 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-121013

Malicious code in umbra-chalk-zenith-koa npm...

EUVD-2025-120161

Malicious code in yakutsk-html-webpack-plugin-koa-mutation npm...

EUVD-2025-111909

Malicious code in koa-rate-limiter-terser-sedna npm...

Malicious code in koa-soap-loglevel-hyperion (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 590e6762f5768773f176dc4f33dd25323b31d82b81f719feeec468c62ea9403e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-111917

Malicious code in koa-module-bootstrap-spica npm...

EUVD-2025-115928

Malicious code in buffer-update-puppeteer-koa npm...

EUVD-2025-122463

Malicious code in rimraf-sync-koa-test npm...

EUVD-2025-123862

Malicious code in pegasus-terser-mongoose-koa npm...

MAL-2025-148366 Malicious code in subscription-request-koa-scorpius (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6c68b8002383770872ccdad0a33557462f10d80f27bd85d0cf04a9636bc71571 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147190 Malicious code in rehype-typeorm-rate-limiter-koa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2d96fef6502b7d80768f460d033cc48a5035c10338d164870a174486af09ced8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...