Malicious code in pavo-graphql-leda-semantic-ui (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6523adc4e404cbe331811a878d4d2667af07aae668bf286e33c5611ffd5bef45 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-123923

Malicious code in pavo-graphql-leda-semantic-ui npm...

EUVD-2025-121295

Malicious code in tethys-slides-leda-eclipse npm...

EUVD-2025-111343

Malicious code in mdx-puppeteer-spectron-webdriver-leda npm...

EUVD-2025-113298

Malicious code in ganymede-nodemon-leda-markdown-pdf npm...

EUVD-2025-123159

Malicious code in public-npm-leda-prettier-plugin-markdown npm...

EUVD-2025-115743

Malicious code in canopus-leda-postgres-cassini npm...

EUVD-2025-111832

Malicious code in leda-miranda-oberon-capella npm...

Malicious code in spica-leda-mongodb-vortex (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bdbe5ec481357f98d1df3769ba55b71340587a839440bd8eb579dcbdf91f8296 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-121549

Malicious code in superagent-cors-vuetify-leda npm...

Malicious code in karma-pipe-leda-ignite (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 737a5e0e5e3b86f535e6d2720d1b3848b751f4c3cadf9db24437aa6bfeadaaf9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-115448

Malicious code in chalk-ursa-leda-pegasus npm...

EUVD-2025-112268

Malicious code in janus-xerxes-hexo-leda npm...

Malicious code in janus-xerxes-hexo-leda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4bee7682159e35a1dafa0280eb0f77a2faf1bce8cfb3153057568a62d233ff9d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-112066

Malicious code in jupiter-altair-sagitta-leda npm...

EUVD-2025-111109

Malicious code in mira-cypress-regulus-leda npm...

EUVD-2025-111403

Malicious code in markdown-pdf-xerxes-janus-leda npm...

EUVD-2025-121025

Malicious code in ultra-perseus-betelgeuse-leda npm...

EUVD-2025-111826

Malicious code in leda-prettier-sedna-elara npm...

Malicious code in leda-sirius-ultra-pegasus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1615c16c9e22f037204875a7e2ea2e865b2b9ab7582cf0c51d171127d3b7a370 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...