EUVD-2025-116530

Malicious code in arcturus-loopback-typeorm-vortex npm...

Malicious code in loopback-changelog-nova-deimos (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d596d73c5cbb63934b0f5f3cd16fab87c035753ffb74a90e8db72291c51a7c22 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-122858

Malicious code in react-bootstrap-loopback-acamar-csrf npm...

EUVD-2025-113608

Malicious code in firebase-meissa-loopback-event npm...

Malicious code in request-sync-magellan-loopback (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8c79f1efc842b2ad8058b2585be7a3aa35dd20a9bd08e234c21471a77b6ad3e9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in loopback-elara-procyon-loop (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 223bcc66a7c9133ca829068685fe0df368e7add5b22eafb33ec966764557a1db This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144683 Malicious code in markdown-loopback-ursa-zenith (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 57f1714b1cf67d20164beb37d9861a8cb15671e68dc261c9e0b7405341022519 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143170 Malicious code in halley-sync-colors-loopback (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a315129aea4bbc0df37718edecba7ea88cb3534b2df5ef52e798db334c6e3d04 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-111552

Malicious code in loopback-sequelize-concurrently-server npm...

EUVD-2025-111563

Malicious code in loopback-global-levels-dorado npm...

EUVD-2025-114651

Malicious code in dactyl-webpack-loopback-winston npm...

EUVD-2025-115868

Malicious code in bulma-xenon-loopback-rate-limiter npm...

EUVD-2025-114951

Malicious code in corvus-loopback-yildun-standard npm...

EUVD-2025-111557

Malicious code in loopback-mutation-sagitta-titan npm...

EUVD-2025-111862

Malicious code in lacerta-thuban-dynamo-loopback npm...

EUVD-2025-121187

Malicious code in tool-loopback-jovian-google npm...

MAL-2025-144655 Malicious code in magellan-pavo-loopback-frontend (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6c98a09c1d172ad9eb72a14167600f9052a467ab7ce122e23fba068359491f7c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145513 Malicious code in node-config-kronos-miranda-loopback (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0ae16a3a44c1202bba281e9ce9367fef3c378fc7b5a59c16eb3b020c2ee73510 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144544 Malicious code in loopback-changelog-nova-deimos (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d596d73c5cbb63934b0f5f3cd16fab87c035753ffb74a90e8db72291c51a7c22 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149711 Malicious code in xerxes-nodemon-test-loopback (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 191a6afdd1eee981950f29cad59759e49c40cd8ef34c6d81b52395578bd2f617 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...