EUVD-2025-116850

Malicious code in airbnb-colors-sync-hapi npm...

EUVD-2025-121514

Malicious code in sync-antares-rehype-yaml npm...

EUVD-2025-121494

Malicious code in sync-telesto-configstore-javascript npm...

EUVD-2025-113439

Malicious code in foundation-sync-jwt-dependencies npm...

EUVD-2025-121649

Malicious code in start-mongoose-scripts-sync npm...

EUVD-2025-115685

Malicious code in carina-rate-limiter-perseus-sync npm...

EUVD-2025-112414

Malicious code in io-hercules-css-loader-sync npm...

EUVD-2025-112942

Malicious code in halley-sync-colors-loopback npm...

EUVD-2025-123174

Malicious code in proxima-vortex-buffer-sync npm...

Malicious code in polaris-sync-procyon-sagitta (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1434d4b6bbcde4dcf7e4fa46ea40212da7acbc15f97dd7d0c59b9c7366c8048a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-112842

Malicious code in hercules-async-sync-less-loader npm...

Malicious code in pm2-sync-convict-react-bootstrap (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1330108cc41fc5f8b16b97bd8b44613ea9687f6d108f9fb4aac46e264b7302b5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nashira-sagitta-tailwindcss-sync (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3e01aa82b5cee7d7f29ead05831e499f5b5cc3032624bb089c35c97543f25b33 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-124010

Malicious code in orbit-pegasus-sync-shelljs npm...

EUVD-2025-121721

Malicious code in spinner-node-config-sync-grus npm...

EUVD-2025-113125

Malicious code in got-sadr-mocha-sync npm...

Malicious code in spinner-uglify-js-sequelize-sync (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4ec3d26ff88984e14fb77619434a0b3aa7a4dbbd8742914e7a787d85979a1bc9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-121712

Malicious code in spinner-uglify-js-sequelize-sync npm...

EUVD-2025-120510

Malicious code in websockets-dactyl-element-ui-sync npm...

Malicious code in proxima-vortex-buffer-sync (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 52486fb9b8c443812e90f249479354ead4215bfd779e8b4540f4a7ff76bf0e6f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...