EUVD-2025-121934

Malicious code in slides-non-blocking-dotenv-safe-loopback npm...

EUVD-2025-124105

Malicious code in ophiuchus-got-perseus-loopback npm...

EUVD-2025-111566

Malicious code in loopback-framework-loopback-janus npm...

Malicious code in loopback-umbra-atlas-perseus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 61f3b937c72af451c9f2a4ec4a819e372d3738b46911b7e547956f052714b532 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-111549

Malicious code in loopback-test-mongodb-sagitta npm...

MAL-2025-144559 Malicious code in loopback-neptune-draco-concurrently (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 863bf80300eab0764f6d6d3b01b0dce677accede3ce2225fb1ebda3b3224b812 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-120790

Malicious code in version-loopback-ursa-charon npm...

EUVD-2025-123699

Malicious code in pino-loopback-uninstall-eslint-plugin npm...

MAL-2025-145513 Malicious code in node-config-kronos-miranda-loopback (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0ae16a3a44c1202bba281e9ce9367fef3c378fc7b5a59c16eb3b020c2ee73510 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-124203

Malicious code in nuxtjs-uglify-js-loopback-comet npm...

EUVD-2025-123825

Malicious code in perseus-loopback-dotenv-parse-variables-ophiuchus npm...

MAL-2025-144564 Malicious code in loopback-server-grunt-terser-webpack-plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0f767bb3ff31fa9ecd5cbd84e586ecf684b960f25ac9654339d7fad97c02d920 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144550 Malicious code in loopback-frontend-prettier-plugin-markdown-spectron (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 76ff5e2656ce3b451ff360f78a67acd91fc9c21a7247fe942f1717f1b59d72de This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144549 Malicious code in loopback-framework-loopback-janus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9a7b27e27c7246783d05331bd95e459820ecd9975b3cb5f76e1d50febbf6d07d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-120413

Malicious code in winston-ophiuchus-configstore-loopback npm...

EUVD-2025-111545

Malicious code in loopback-weywot-style-loader-gemini npm...

EUVD-2025-111555

Malicious code in loopback-puppeteer-orbit-configstore npm...

MAL-2025-140413 Malicious code in carina-loopback-zenith-socketio (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a938276cf14613f10aa6d135009c7b24f7fb2e652a0db5c52685da55ce264972 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142632 Malicious code in fornax-loopback-google-selenium (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1453791ccec0e6d9af3bb03731b15537c00689db44a6584eef16befedb6d447c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141237 Malicious code in cressida-loopback-chromedriver-chariklo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d1a0af00cb0b9785b12adba41fa57c163bee087f98cf867dd44117cf472565a2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...