EUVD-2025-123159

Malicious code in public-npm-leda-prettier-plugin-markdown npm...

EUVD-2025-111824

Malicious code in leda-regulus-standard-stop npm...

EUVD-2025-111852

Malicious code in leda-command-superagent-cache npm...

MAL-2025-139260 Malicious code in airbnb-node-sass-leda-procyon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 60b532c53d3667571b50126b7f8df59d25d564f7f2f526e3f6f2b6dc5917495a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144282 Malicious code in leda-nodejs-nextjs-sirius (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8488e7f3eb1b0a423523519eca85887ecd6c04e408dbec4c05e2e936659200fd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in vulcan-leda-auriga-antares (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5086134f060f78e8bd2666915ded5575a2b0ac781abe295b75d87751eb90fdc4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-111831

Malicious code in leda-nodejs-nextjs-sirius npm...

MAL-2025-140533 Malicious code in centauri-nconf-leda-cors (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9dd1c3839c4c52ac299aa6ff8a234c2c2d6ebd9a1e9f5d26360e271986f7d348 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144268 Malicious code in leda-envconfig-odin-sass-loader (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 545debb26587667e69b5f9503887007f02cbe554eb8a038763455fc702c9e014 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-120784

Malicious code in version-scripts-leda-async npm...

EUVD-2025-115620

Malicious code in castor-leda-init-colors npm...

MAL-2025-145983 Malicious code in passport-leda-spectron-spawn (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f602944b892aa1b431311a550c2bdfafa04a4576371a9039de3d80d1165b73af This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142814 Malicious code in ganymede-nodemon-leda-markdown-pdf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4d2004e18fbe39423ab8eee340b3dd2081f394d96d9b37c08e3aab6bc2ea5993 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140487 Malicious code in castor-leda-init-colors (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6d1e61eb88822973087b0503c6c945e9cff5c7871fd776b41eeb9b423b647460 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142076 Malicious code in envconfig-leda-websockets-unuk (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ddc05fa3cd9f4503e9a6ef3a2b9544d84ee3409950cb0aef2970cd01c032abbe This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144656 Malicious code in magellan-playwright-sirius-leda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1b45bedbf93ddf35569e377ee843b9f2657b598f470050b225b0d8b52c953834 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145472 Malicious code in nightwatch-leda-phoebe-titan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e255ef36785234c21c00b9b872a09dc23df76ee5a10435c11ac71e04b7c37b69 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144281 Malicious code in leda-miranda-oberon-capella (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 461eb1aaa170f1ade3866b64f4560dc0a875eb7da1242e23479da25eb4790740 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in juno-leda-pino-toml (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b8243a29c368f8aad9271546a6bf78f1aee26bfa5e3396bf2db32d0c0828de5d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142856 Malicious code in geckodriver-betelgeuse-child-process-leda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 31abebe698d8af8cbc8ebce961177393b1d102428f71683195d47280d39b7ea6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...