MAL-2025-144655 Malicious code in magellan-pavo-loopback-frontend (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6c98a09c1d172ad9eb72a14167600f9052a467ab7ce122e23fba068359491f7c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145513 Malicious code in node-config-kronos-miranda-loopback (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0ae16a3a44c1202bba281e9ce9367fef3c378fc7b5a59c16eb3b020c2ee73510 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-114651

Malicious code in dactyl-webpack-loopback-winston npm...

EUVD-2025-112442

Malicious code in install-chakra-ui-loopback-antares npm...

EUVD-2025-124408

Malicious code in node-config-kronos-miranda-loopback npm...

EUVD-2025-111554

Malicious code in loopback-readable-meissa-miranda npm...

EUVD-2025-115339

Malicious code in chromedriver-elektra-halley-loopback npm...

EUVD-2025-111301

Malicious code in meissa-loopback-dactyl-avior npm...

EUVD-2025-122719

Malicious code in relay-loopback-electron-builder-chalk npm...

EUVD-2025-120322

Malicious code in xanadu-run-script-ceres-loopback npm...

EUVD-2025-111562

Malicious code in loopback-install-cosmos-juno npm...

EUVD-2025-113659

Malicious code in fetch-polaris-loopback-registry npm...

EUVD-2025-123825

Malicious code in perseus-loopback-dotenv-parse-variables-ophiuchus npm...

Malicious code in halley-sync-colors-loopback (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a315129aea4bbc0df37718edecba7ea88cb3534b2df5ef52e798db334c6e3d04 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in betelgeuse-xanadu-deimos-loopback (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f7f44508c82652976c4e53f82e197081f45973be86a711dab05db353c389cbfb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-115537

Malicious code in ceres-loopback-sequelize-browserify npm...

EUVD-2025-124105

Malicious code in ophiuchus-got-perseus-loopback npm...

EUVD-2025-115637

Malicious code in cassini-mensa-kastra-loopback npm...

EUVD-2025-111567

Malicious code in loopback-forever-polaris-middleware npm...

Malicious code in impulse-chalk-browserify-loopback (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6b4135ccaa60e37d9c574a7f14ef998a716328721b7261309164bfd5c329e6f5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...