EUVD-2025-111773

Malicious code in less-nconf-global-hapi npm...

EUVD-2025-111770

Malicious code in less-protractor-nebula-figures npm...

EUVD-2025-111769

Malicious code in less-request-farout-delphinus npm...

EUVD-2025-111487

Malicious code in magellan-concurrently-markdown-less npm...

EUVD-2025-111156

Malicious code in middleware-jwt-nodejs-less npm...

EUVD-2025-112408

Malicious code in io-restart-less-neptune npm...

EUVD-2025-112388

Malicious code in iota-fomalhaut-less-loader-repository npm...

Malicious code in bunyan-less-loader-tethys-playwright (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 24cbc3a3cc8e63e76f314b7ddd68857182ffde9e092dd347c91d634fdb95c116 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in callback-package-tethys-less-loader (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 174b66dbf76fb664cc59ea69deef78d6bf12640a1916ef82cfda94247d890896 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in charon-less-express-non-blocking (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 562a2f28d71d1862fe1f923bc1ffe145c137be676be0bd1b77de0183b4bddd86 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in child-process-lint-staged-less-style-loader (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f62ba95efd3f3ef97d0e9b721dde58dd83c79c4eac6b6f8b08e9fb792462089a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in commitlint-triton-less-loader-umbra (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 359f28fccd67ed92da7ca0e7b2618ad8b2231c15a5d76882a1f4682b81ed5219 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in corvus-tethys-elektra-less-loader (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 00414bc558ede2504999ccd82b0749bf8e7114569a2c2e502313eae1f9ec0a12 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dynamo-winston-less-fornax (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5865ce4555741b83e7e2292332e129b48064cdba03fd7b905da6b142e1f64b5d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in less-html-webpack-plugin-phoebe-neptune (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6233d66c6ce8a24ae4549b43abe8ec5046cc8b0a19973a0bf6447ca912d0408c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in less-loader-element-ui-telesto-uninstall (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 091e4c1a8b60123a2b2d436c5a524817831c21f9b7f3477496bb5ba467fb5473 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in less-loader-pino-dotenv-safe-quark (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f2af76f40a9ef37626c42f5c3ea2f4de40317e8fd209c2822c63c0123bdf79ba This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in less-socketio-loglevel-carpo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 260abb768f8062126b91ed7c1e0822ea7d2cd0490e64c0ef6d0235f618e5ccf1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nightwatch-fomalhaut-less-deimos (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector eb8383b61773b5aa6e2d7e266beb1e5d0d03731d8d57cbef93747ba115ed2749 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in pavo-less-loader-convict-uglify-js (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 99bd14deccdda00ebe2d12bd079dde2bd5bbe69e9bb4335c43239ee0a5abf57e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...