EUVD-2025-112083

Malicious code in juno-loopback-tailwindcss-blitz npm...

EUVD-2025-112000

Malicious code in karma-lacerta-loopback-karma npm...

EUVD-2025-111862

Malicious code in lacerta-thuban-dynamo-loopback npm...

Malicious code in betelgeuse-xanadu-deimos-loopback (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f7f44508c82652976c4e53f82e197081f45973be86a711dab05db353c389cbfb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in carina-loopback-zenith-socketio (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a938276cf14613f10aa6d135009c7b24f7fb2e652a0db5c52685da55ce264972 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ceres-loopback-sequelize-browserify (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d41931976c004d89c852a678bc51be3e40ffa196f8850fa53ff966d073391c22 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in commitlint-dependencies-loopback-proxima (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0aef012a555af886c0bacf11d142271509bea1aa08ebcf5f1b0cc1c4e895b26d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in firebase-meissa-loopback-event (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 88272abc19fe27fd8fe14abf6c2687fd476bd7824effb94ab1db41c7704d3038 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fornax-loopback-npm-wolf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9b975a5ba0f0c6a4838576be74c94b28470bbf753a132f2a366c7773f2f67dc2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in halley-sync-colors-loopback (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a315129aea4bbc0df37718edecba7ea88cb3534b2df5ef52e798db334c6e3d04 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in impulse-chalk-browserify-loopback (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6b4135ccaa60e37d9c574a7f14ef998a716328721b7261309164bfd5c329e6f5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in jabbah-nuxtjs-spica-loopback (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 14c6404a455bb29d3f9893290050e6e8982e6a5dbc7c9429a4f25827345da287 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in loopback-changelog-nova-deimos (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d596d73c5cbb63934b0f5f3cd16fab87c035753ffb74a90e8db72291c51a7c22 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in loopback-elara-procyon-loop (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 223bcc66a7c9133ca829068685fe0df368e7add5b22eafb33ec966764557a1db This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in loopback-firebase-postgres-luna (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2789696425e4ec276c93faea29470a11265e41a4117bcdbc14f88a208240a63e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in loopback-forever-polaris-middleware (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2efb4c31e93fd3c6ce23411d5d44679473acc2e6af0413baee0f7d9d42b58cb2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in loopback-framework-loopback-janus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9a7b27e27c7246783d05331bd95e459820ecd9975b3cb5f76e1d50febbf6d07d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in loopback-install-cosmos-juno (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 27fe72bddd7ee5698a90b2681d3e1802889bb959c6cac112326eb20b2f1d6a02 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in loopback-mutation-sagitta-titan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 462802e07ab661b8ece47a77f17dbb548914d1cfa70cd1bfcbabaa8d355d0c75 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in loopback-neptune-draco-concurrently (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 863bf80300eab0764f6d6d3b01b0dce677accede3ce2225fb1ebda3b3224b812 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...