EUVD-2025-115537

Malicious code in ceres-loopback-sequelize-browserify npm...

EUVD-2025-115339

Malicious code in chromedriver-elektra-halley-loopback npm...

EUVD-2025-115131

Malicious code in commitlint-dependencies-loopback-proxima npm...

EUVD-2025-115031

Malicious code in convict-loopback-ganymede-meissa npm...

EUVD-2025-114951

Malicious code in corvus-loopback-yildun-standard npm...

EUVD-2025-116530

Malicious code in arcturus-loopback-typeorm-vortex npm...

EUVD-2025-115919

Malicious code in build-loopback-transform-publish npm...

EUVD-2025-115872

Malicious code in bulma-uninstall-loopback-sass-loader npm...

EUVD-2025-115868

Malicious code in bulma-xenon-loopback-rate-limiter npm...

EUVD-2025-116788

Malicious code in algol-weywot-loopback-nodejs npm...

MAL-2025-145295 Malicious code in native-spectron-mini-css-extract-plugin-loopback (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 505388a8783d7f424494f00e26cba4bd80636e9b279651a4c1f7bc3de62f07ad This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143170 Malicious code in halley-sync-colors-loopback (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a315129aea4bbc0df37718edecba7ea88cb3534b2df5ef52e798db334c6e3d04 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144542 Malicious code in loopback-bootstrap-yonder-iota (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 83ec91cfd298ae8192aecea899b37e4c3215d79987691a12d3092f9767b48fb3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144797 Malicious code in meissa-chakra-ui-cz-conventional-changelog-loopback (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f9f285c7d45797112ceab0a231619970762984e8ac052e668d9864ec4afeba50 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140977 Malicious code in commitlint-dependencies-loopback-proxima (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0aef012a555af886c0bacf11d142271509bea1aa08ebcf5f1b0cc1c4e895b26d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144555 Malicious code in loopback-kastra-soap-bulma (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0e6751700dd5dafa2b7cc3b3121f35df9e182b23f1034caf2ebb6aedeb0f047c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144683 Malicious code in markdown-loopback-ursa-zenith (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 57f1714b1cf67d20164beb37d9861a8cb15671e68dc261c9e0b7405341022519 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142503 Malicious code in firebase-meissa-loopback-event (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 88272abc19fe27fd8fe14abf6c2687fd476bd7824effb94ab1db41c7704d3038 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147991 Malicious code in slides-non-blocking-dotenv-safe-loopback (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0850f47bc6fffbed41e4a34730cecc0e53621b63abb4a3b3199ba5f61ad97ddf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149711 Malicious code in xerxes-nodemon-test-loopback (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 191a6afdd1eee981950f29cad59759e49c40cd8ef34c6d81b52395578bd2f617 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...