EUVD-2025-179126

Malicious code in entanglement-australis-event-leda npm...

Malicious code in oscillation-leda-warp-framework (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b4034a7c18a9c9766f734ef16d4eadac9e3d3574d8910068cacc02e37e741318 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-175991

Malicious code in test-meissa-stream-leda npm...

EUVD-2025-178154

Malicious code in leda-cassini-dactyl-mongodb npm...

EUVD-2025-179815

Malicious code in centaurus-superagent-spinner-leda npm...

EUVD-2025-176065

Malicious code in tardigrade-leda-jest-chakra-ui npm...

MAL-2025-186048 Malicious code in centauri-leda-playwright-cygnus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7671ad2b6e8453e44752aa7977970a925b638a23e89cc48acf0f5ed0d5abd921 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189810 Malicious code in tardigrade-leda-jest-chakra-ui (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dfc10d3011c67ac3227ac1cca651f3336c62b6433d148e3e9eb1973f82c03c8b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in centauri-leda-playwright-cygnus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7671ad2b6e8453e44752aa7977970a925b638a23e89cc48acf0f5ed0d5abd921 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in leda-gemini-saturnology-jovian (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a6f5b569b71df46bf686285180ffd3ef0e011173804742d78524bd68db8bc38c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-179229

Malicious code in dynamo-leda-registry-unuk npm...

EUVD-2025-179294

Malicious code in dione-transport-astrobiology-leda npm...

EUVD-2025-178145

Malicious code in leda-morgan-xanthus-ophiuchus npm...

EUVD-2025-176996

Malicious code in prosthetics-leda-mantle-deimos npm...

Malicious code in update-leda-ora-bootes (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e252313c23c3c5509c627db3eebcfc9456566db411c0497086f9794cb39f2fd2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-179918

Malicious code in cache-mensa-leda-build npm...

EUVD-2025-178147

Malicious code in leda-kaus-bellatrix-leda npm...

EUVD-2025-175541

Malicious code in winston-leda-mesosphere-umbra npm...

EUVD-2025-180021

Malicious code in blueshift-canopus-leda-higgs npm...

EUVD-2025-180084

Malicious code in betelgeuse-sadr-antd-leda npm...