MAL-2025-142987 Malicious code in got-sadr-mocha-sync (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 40d82631c478969a084a95044f545da8cde4bbd9f304f27c6bded05d9020213a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144467 Malicious code in lint-staged-sync-global-test (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0b9f543858dd41d5c201e3ced1a84ac7806a02565e07ef4cca4bd240aa85d04a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-113125

Malicious code in got-sadr-mocha-sync npm...

EUVD-2025-123402

Malicious code in prettier-stylelint-sync-install-loopback npm...

MAL-2025-142673 Malicious code in foundation-sync-jwt-dependencies (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0763efc2d7e662922249fb41abf295d83acb6a6eeaac78e28e2930207857b575 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-122796

Malicious code in registry-firebase-command-sync npm...

EUVD-2025-124858

Malicious code in miranda-sync-despina-auth0 npm...

Malicious code in halley-sync-colors-loopback (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a315129aea4bbc0df37718edecba7ea88cb3534b2df5ef52e798db334c6e3d04 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-113677

Malicious code in fetch-betelgeuse-schema-sync npm...

EUVD-2025-112942

Malicious code in halley-sync-colors-loopback npm...

EUVD-2025-124636

Malicious code in nashira-sagitta-tailwindcss-sync npm...

EUVD-2025-124574

Malicious code in nebula-mdx-polaris-sync npm...

EUVD-2025-121642

Malicious code in start-sync-foundation-init npm...

Malicious code in spectron-juno-sync-venus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 029c69347857d8315b739f23392a7f38ae2dfc69862917d707b23b71ff615f58 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-115411

Malicious code in chariklo-gulp-sync-child-process npm...

EUVD-2025-111575

Malicious code in loop-yonder-betelgeuse-sync npm...

EUVD-2025-115069

Malicious code in config-sync-stream-jasmine npm...

EUVD-2025-121508

Malicious code in sync-cross-env-firebase-css-minimizer-webpack-plugin npm...

EUVD-2025-112360

Malicious code in izar-cassini-ursa-sync npm...

Malicious code in ini-delphinus-fetch-sync (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 685d40676848a894fe55a348008ca0bd6c6005b42422e1675050fcd0adb0f43f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...