EUVD-2025-111809

Malicious code in leda-yildun-impulse-eslint-config npm...

EUVD-2025-120577

Malicious code in webdriver-mocha-leda-prettier-oberon npm...

EUVD-2025-116329

Malicious code in avior-leda-cordelia-middleware npm...

EUVD-2025-114440

Malicious code in docusaurus-kinetic-leda-karma npm...

Malicious code in cross-env-ganymede-leda-markdown-pdf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e4ba82946028f26ae50bed848a88471cb5a5be888135ced1523e3e5774ad9f74 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-111817

Malicious code in leda-style-loader-pyxis-izar npm...

EUVD-2025-120694

Malicious code in vulcan-graphql-sadr-leda npm...

EUVD-2025-122891

Malicious code in rate-limiter-bulma-enif-leda npm...

Malicious code in pavo-graphql-leda-semantic-ui (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6523adc4e404cbe331811a878d4d2667af07aae668bf286e33c5611ffd5bef45 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in leda-janus-solis-dynamo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ed9fb31c30ca5d5d897eff38497628d504dc12949cc78ef5f059a5a10c1355d0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-112594

Malicious code in ignite-leda-framework-superagent npm...

MAL-2025-145463 Malicious code in nightwatch-deimos-leda-yildun (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f8475c1c266d0e690c2f9296e115ccc4b101bfc71735de6f158cc7dc1336c634 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145472 Malicious code in nightwatch-leda-phoebe-titan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e255ef36785234c21c00b9b872a09dc23df76ee5a10435c11ac71e04b7c37b69 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142856 Malicious code in geckodriver-betelgeuse-child-process-leda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 31abebe698d8af8cbc8ebce961177393b1d102428f71683195d47280d39b7ea6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144290 Malicious code in leda-rigel-antares-non-blocking (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector be301a42f033b5a9ea4c10f77415df52a52f4f062a65466b42ffb532f5484804 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146311 Malicious code in pm2-run-script-eslint-plugin-leda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a817f06ae0a4d8dc0d41ca305b9e56576f1bd8664d47548dc7532d0c54975083 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144285 Malicious code in leda-pino-pretty-command-postcss (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7ce119a64f69bf04c213d4d6ae4eb4186c8268e2283415e92a5a68319226bb4a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148164 Malicious code in spica-leda-mongodb-vortex (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bdbe5ec481357f98d1df3769ba55b71340587a839440bd8eb579dcbdf91f8296 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144078 Malicious code in jwt-leda-framework-module (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3bb4f8cb8d4f557c3034d71e7ecaf0ff765c06e1a8805438ce959a7d22ca3637 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144291 Malicious code in leda-rollup-mongodb-heka (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1e8e055ded6c374433931709e21ef5dbbc32dd336f2b829628a9a9e900854e5e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...