EUVD-2025-111735

Malicious code in library-loop-centaurus-request npm...

EUVD-2025-121118

Malicious code in triton-child-process-apollo-loop npm...

EUVD-2025-113747

Malicious code in exec-winston-loop-nightwatch npm...

EUVD-2025-114327

Malicious code in dotenv-safe-wezen-loop-restart npm...

EUVD-2025-114287

Malicious code in duplex-winston-loop-hyperion npm...

EUVD-2025-122187

Malicious code in scripts-loop-zephyr-lynx npm...

EUVD-2025-124095

Malicious code in ophiuchus-loop-yaml-terser-webpack-plugin npm...

Malicious code in framework-middleware-lacerta-loop (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 31df38ca4c3e3277166d99f269c8cc7b1bfd0b00043591dc99a50a8df3940754 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-111576

Malicious code in loop-xerxes-markdown-fomalhaut npm...

EUVD-2025-122314

Malicious code in sagitta-perseus-figures-loop npm...

EUVD-2025-111320

Malicious code in meissa-bunyan-loop-ophiuchus npm...

EUVD-2025-124876

Malicious code in miranda-loop-pino-chariklo npm...

Malicious code in dynamo-nodemon-bulma-dependencies (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 19bcdbdeb2b193f13228505dc1bd26683ae0fa84814258d565bd822beae73fd7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in bulma-jest-native-loop (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cf0b40cb822ff26e7b9ff2e5312fb6258c4d7e5bf4a031285331bcabfdf2cc1f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in aquarius-jwt-bulma-webdriver-mocha (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6563a0cc256be828325c533ef3b8a3fa946a92f767374fdfd71f591644edea79 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in restart-loop-quito-antd (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ce3b08b626c1b721e934cc6da12eada881e281233c8d27a95f2ee119e8031a5b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144529 Malicious code in loop-mensa-xml-winston (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 588fd6e066e2dd3092837d1df974d64a5ad7b55e0b95e3888d7853b746fbb1dd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145074 Malicious code in mocha-eris-spectron-forever (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3efc9e761073af4b945f488bcf38fcfe267283030cd5f0c9994ecbc03975fbd8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144534 Malicious code in loop-scripts-koa-oauth (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2b8bd7851dd59a18465c76cea03c8ddae5cbf1b88a7a03c3e87200dc9451156a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148944 Malicious code in umbriel-mongodb-pegasus-rocket (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 659c7ebb25050f6cc449c809f7c3eace227431e179d516051f3a1aa1809ab659 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...