MAL-2025-144550 Malicious code in loopback-frontend-prettier-plugin-markdown-spectron (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 76ff5e2656ce3b451ff360f78a67acd91fc9c21a7247fe942f1717f1b59d72de This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144549 Malicious code in loopback-framework-loopback-janus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9a7b27e27c7246783d05331bd95e459820ecd9975b3cb5f76e1d50febbf6d07d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-120413

Malicious code in winston-ophiuchus-configstore-loopback npm...

EUVD-2025-111545

Malicious code in loopback-weywot-style-loader-gemini npm...

EUVD-2025-111555

Malicious code in loopback-puppeteer-orbit-configstore npm...

MAL-2025-140413 Malicious code in carina-loopback-zenith-socketio (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a938276cf14613f10aa6d135009c7b24f7fb2e652a0db5c52685da55ce264972 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142632 Malicious code in fornax-loopback-google-selenium (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1453791ccec0e6d9af3bb03731b15537c00689db44a6584eef16befedb6d447c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141237 Malicious code in cressida-loopback-chromedriver-chariklo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d1a0af00cb0b9785b12adba41fa57c163bee087f98cf867dd44117cf472565a2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-111573

Malicious code in loopback-bootstrap-yonder-iota npm...

EUVD-2025-123015

Malicious code in quantum-loopback-element-ui-wasat npm...

EUVD-2025-111561

Malicious code in loopback-jest-oberon-jsonp npm...

EUVD-2025-112162

Malicious code in jovian-loopback-terser-webpack-plugin-protractor npm...

EUVD-2025-111550

Malicious code in loopback-socketio-restart-resolvers npm...

EUVD-2025-112576

Malicious code in impulse-chalk-browserify-loopback npm...

EUVD-2025-111570

Malicious code in loopback-cors-scorpius-quasar npm...

EUVD-2025-111560

Malicious code in loopback-kastra-soap-bulma npm...

EUVD-2025-111318

Malicious code in meissa-chakra-ui-cz-conventional-changelog-loopback npm...

EUVD-2025-111546

Malicious code in loopback-uninstall-europa-vulcan npm...

Malicious code in halley-sync-colors-loopback (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a315129aea4bbc0df37718edecba7ea88cb3534b2df5ef52e798db334c6e3d04 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in loopback-install-cosmos-juno (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 27fe72bddd7ee5698a90b2681d3e1802889bb959c6cac112326eb20b2f1d6a02 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...