EUVD-2025-115620

Malicious code in castor-leda-init-colors npm...

MAL-2025-139260 Malicious code in airbnb-node-sass-leda-procyon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 60b532c53d3667571b50126b7f8df59d25d564f7f2f526e3f6f2b6dc5917495a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145463 Malicious code in nightwatch-deimos-leda-yildun (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f8475c1c266d0e690c2f9296e115ccc4b101bfc71735de6f158cc7dc1336c634 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-124616

Malicious code in nconf-babel-leda-ganymede npm...

EUVD-2025-114970

Malicious code in cors-slidev-leda-ora npm...

Malicious code in pm2-run-script-eslint-plugin-leda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a817f06ae0a4d8dc0d41ca305b9e56576f1bd8664d47548dc7532d0c54975083 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-122363

Malicious code in sadr-css-loader-kaus-leda npm...

EUVD-2025-114855

Malicious code in cross-env-ganymede-leda-markdown-pdf npm...

Malicious code in chalk-ursa-leda-pegasus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ea6ec642046a778fe5cd41330acbc46e330ab9944a2ca56be7bd85413f74fbda This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-123336

Malicious code in procyon-docusaurus-leda-convict npm...

EUVD-2025-112268

Malicious code in janus-xerxes-hexo-leda npm...

EUVD-2025-111831

Malicious code in leda-nodejs-nextjs-sirius npm...

EUVD-2025-111824

Malicious code in leda-regulus-standard-stop npm...

EUVD-2025-115991

Malicious code in bootstrap-json-leda-thuban npm...

EUVD-2025-111940

Malicious code in kinetic-gulp-leda-restart npm...

EUVD-2025-115178

Malicious code in commitizen-fetch-leda-webpack npm...

EUVD-2025-111818

Malicious code in leda-sirius-ultra-pegasus npm...

EUVD-2025-111835

Malicious code in leda-koa-dotenv-safe-atlas npm...

Malicious code in leda-koa-dotenv-safe-atlas (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 808c73d9e9f389030423bb79948118805a5bdf318cf7822ce009acc6fb93fa32 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in typeorm-superagent-leda-registry (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4647d217a21dc4cef2ad4a2cd3d26af951f19772cac97e0e79ac9d23abdf79d1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...