EUVD-2025-122068

Malicious code in semantic-ui-pulsar-reveal-md-leda npm...

EUVD-2025-111827

Malicious code in leda-prettier-antd-convict npm...

MAL-2025-143781 Malicious code in jabbah-leda-install-eslint-config (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d12f6206cdd8066e12c04469916390bf6e9c7de288ef09cf420a09ead8c87823 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144279 Malicious code in leda-metalsmith-cassini-avior (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ebb8c8766f8543981afe7cd3ab173f90aefcaa4b6b7fbe5fbff2d7b9838cbc68 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143845 Malicious code in janus-xerxes-hexo-leda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4bee7682159e35a1dafa0280eb0f77a2faf1bce8cfb3153057568a62d233ff9d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148164 Malicious code in spica-leda-mongodb-vortex (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bdbe5ec481357f98d1df3769ba55b71340587a839440bd8eb579dcbdf91f8296 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145936 Malicious code in package-leda-regulus-bootes (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fd8f0689326fa30f2f33ca0e7b640cd54c8dba70d9fa36308272b06574817d03 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-112035

Malicious code in jwt-leda-framework-module npm...

MAL-2025-144331 Malicious code in less-loader-sqlite-cressida-leda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dfad0409b327a1ff625e51df8e7af533b188b1956e73a702db2ea2f869b010db This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140363 Malicious code in canopus-leda-postgres-cassini (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 16592b4ce6c067b6870d21abaf030dffb146d291061175fd9639b09e183061f3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142192 Malicious code in eslint-config-betelgeuse-leda-eslint (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a7d1950ff7371cd89e9f79ac4f6a18270b302d3dd6f9dca88f95a2cafd66fb55 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139773 Malicious code in avior-leda-cordelia-middleware (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d8ebc3dafe421376c8a68b4f99a070c82d6b07785161a4d708ff483c04935e82 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-113554

Malicious code in forever-alphard-zenobia-leda npm...

EUVD-2025-111502

Malicious code in lyra-leda-css-loader-orbit npm...

Malicious code in cross-env-ganymede-leda-markdown-pdf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e4ba82946028f26ae50bed848a88471cb5a5be888135ced1523e3e5774ad9f74 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-122891

Malicious code in rate-limiter-bulma-enif-leda npm...

EUVD-2025-120048

Malicious code in zephyr-epimetheus-leda-browserify npm...

Malicious code in jest-weywot-leda-stream (npm)

The package jest-weywot-leda-stream was found to contain malicious code...

Malicious code in eventhoriz-apex-centaurus-leda (npm)

The package eventhoriz-apex-centaurus-leda was found to contain malicious code...

Malicious code in magellan-geckodriver-toml-leda (npm)

The package magellan-geckodriver-toml-leda was found to contain malicious code...