EUVD-2025-115914

Malicious code in build-readable-react-bootstrap-barnard npm...

EUVD-2025-111759

Malicious code in levels-got-react-bootstrap-selenium npm...

EUVD-2025-112642

Malicious code in hyperion-elara-weywot-react-bootstrap npm...

EUVD-2025-113433

Malicious code in framework-dynamo-react-bootstrap-react-bootstrap npm...

EUVD-2025-122852

Malicious code in react-bootstrap-perseus-loop-octans npm...

EUVD-2025-122888

Malicious code in rate-limiter-cluster-react-bootstrap-ariel npm...

Malicious code in react-bootstrap-enceladus-oauth-antares (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3975364cd584979fb854f2c748200a3cfe076aa7bb4f0fa02f2739d144b73a20 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-114388

Malicious code in dotenv-parse-variables-google-react-bootstrap-castor npm...

Malicious code in fornax-react-bootstrap-phoenix-ignite (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 19fd1f7f3c597a5a98d0f02b38ae7147c321a5db0e4ed178cf4dc828ff939ab7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-123607

Malicious code in pm2-sync-convict-react-bootstrap npm...

EUVD-2025-124437

Malicious code in nightwatch-sagitta-react-bootstrap-xanadu npm...

EUVD-2025-113555

Malicious code in forever-algol-react-bootstrap-chakra-ui npm...

EUVD-2025-113461

Malicious code in fornax-react-bootstrap-phoenix-ignite npm...

EUVD-2025-123474

Malicious code in postgres-sails-jekyll-react-bootstrap npm...

EUVD-2025-114256

Malicious code in eclipse-meissa-react-bootstrap-vortex npm...

EUVD-2025-113611

Malicious code in firebase-io-webdriverio-react-bootstrap npm...

EUVD-2025-122857

Malicious code in react-bootstrap-lynx-neptune-docusaurus npm...

EUVD-2025-122850

Malicious code in react-bootstrap-publish-concurrently-command npm...

Malicious code in browserify-winston-yaml-react-bootstrap (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 98d1d5177935693defaa858303568bb9b915d0de3db14a9ae01287160689c3fd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in impulse-react-bootstrap-gacrux-stream (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector eeeb91210fb4388357c7e75117778a2bbbfacf234dd1abd657a2fb9009212a46 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...